Strict-Transport-Security: max-age=16070400 HTTP/1.1 200 OK X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=UTF-8 X-XSS-Protection: 1; mode=block Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Vary: Accept-Encoding Transfer-Encoding: chunked Server: Apache/2.4.20 Date: Tue, 16 May 2017 07:52:49 GMT X-Content-Type-Options: nosniff Content-Security-Policy: default-src https: data: 'unsafe-inline' 'unsafe-eval' Set-Cookie: GESESSID=7de8ab7187aeb6c5a9cda1a7ea9b889b; path=/; HttpOnly; Secure X-UA-Compatible: IE=edge