X-Runtime: 0.064159
X-Request-Id: as7ot6r6tc0ugdtqqe0g
X-Content-Type-Options: nosniff
Server: cloudflare-nginx
Content-Type: text/html; charset=utf-8
X-Frame-Options: SAMEORIGIN
Cache-Control: max-age=0, private, must-revalidate
Transfer-Encoding: chunked
Date: Thu, 25 May 2017 06:10:35 GMT
HTTP/1.1 200 OK
X-XSS-Protection: 1; mode=block
Status: 200 OK
Content-Security-Policy: default-src 'self'; child-src 'self' platform.twitter.com staticxx.facebook.com http://www.facebook.com https://fast.wistia.net https://player.vimeo.com https://www.facebook.com https://www.youtube.com; connect-src 'self' wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://api.intercom.io https://app.intercom.io https://app.intercom.com https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io https://alexandria-api.internal.intercom.io; font-src data: https:; img-src data: blob: https: http:; media-src data: blob: https:; object-src 'self' static.intercomassets.com; script-src 'self' connect.facebook.net platform.twitter.com static.intercomassets.com www.googleadservices.com https://widget.intercom.io https://js.intercomcdn.com https://www.google-analytics.com 'nonce-yrdhWG5OM4YuDX+11546Y4DpXVZlsssil2tdhMAtZBM='; style-src 'self' 'unsafe-inline' static.intercomassets.com static.intercomcdn.com marketing.intercomassets.com marketing.intercomcdn.com; report-uri https://app.getsentry.com/api/78262/csp-report/?sentry_key=b1a921ff303348079cbfcc760f7e790d
CF-RAY: 36465519e86c6403-FRA
Connection: keep-alive
Set-Cookie: __cfduid=deb15f329bd471943e1fddefd3ac132f01495692635; expires=Fri, 25-May-18 06:10:35 GMT; path=/; domain=.baremetrics.com; HttpOnly