Content-Security-Policy: default-src https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleapis.com *.thawte.com; style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com HTTP/1.1 200 OK X-Content-Type-Options: nosniff Transfer-Encoding: chunked Pragma: no-cache Set-Cookie: mode=verify; Secure Set-Cookie: portalId=atlatosV3; Secure Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: JSESSIONID=919A82EE31572E5646253CEF92D2E45D; Path=/AtlatosV3; Secure; HttpOnly Referrer-Policy: same-origin Content-Type: text/html;charset=ISO-8859-1 Server: Apache/2.4.25 Date: Fri, 30 Jun 2017 00:08:28 GMT Cache-Control: max-age=0, private, no-cache, must-revalidate, proxy-revalidate, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload P3P: CP='IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA' X-Xss-Protection: 1; mode=block