diff --git a/Home.md b/Home.md
index 6370d4c..8327657 100644
--- a/Home.md
+++ b/Home.md
@@ -109,7 +109,7 @@ That `state` session ID is also validated, as the first step in ensuring the int
 
 The function that will handle all of the requests and validation is called `gLogin()`.
 
-## A short review
+### A short review
 To recap so far:
 
 1. Our application generates a unique session ID.
@@ -125,7 +125,7 @@ To recap so far:
 
 We're not even close to being done yet - time to keep going!
 
-## Sending the POST request to Google
+### Sending the POST request to Google
 The authorization code Google provides allows your application to access basic information about the user. Your application uses an HTTPS POST request to access Google's APIs. This ensures the connection is encrypted. Additionally, this request is done server-side, so the user - or malicious third-parties - can't intercept the request and change it (or steal your user's information).
 
 In the code above, we created a string of parameters to be sent to Google. This is passed to a function, `gLogin`, to be used in the request to Google. Let's look at what that function does.