Vary: Accept-Encoding X-Permitted-Cross-Domain-Policies: none X-Frame-Options: SAMEORIGIN Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Connection: keep-alive HTTP/1.1 200 OK Pragma: no-cache Set-Cookie: bf_session=v0li10f326uruoqnc6e3nr33827nmpd2; expires=Mon, 04-Dec-2017 22:41:16 GMT; Max-Age=86400; path=/; secure; HttpOnly Server: nginx X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Set-Cookie: ci_csrf_token=fa849e74341aa1fafa853b74326609ec; expires=Mon, 04-Dec-2017 00:41:16 GMT; Max-Age=7200; path=/; secure Cache-Control: no-transform Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-XSS-Protection: 1; mode=block Date: Sun, 03 Dec 2017 22:41:16 GMT Transfer-Encoding: chunked Expires: Thu, 19 Nov 1981 08:52:00 GMT