Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate X-Frame-Options: deny Pragma: no-cache Content-Type: text/html;charset=UTF-8 Connection: keep-alive HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Expires: Thu, 19 Nov 1981 08:52:00 GMT Server: nginx X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000 Set-Cookie: session_id=vuf73hhdipduac77o07k0ps2g1; expires=Tue, 26-Feb-2019 03:21:50 GMT; Max-Age=31536000; secure Content-Security-Policy: default-src 'self'; script-src 'self' maps.googleapis.com www.google-analytics.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; media-src 'self'; font-src 'self' fonts.gstatic.com; img-src *; frame-ancestors 'none' Expires: 0 X-Xss-Protection: 1; mode=block Date: Mon, 26 Feb 2018 03:21:50 GMT Transfer-Encoding: chunked Cache-Control: no-store, no-cache, must-revalidate