X-XSS-Protection: 1; mode=block HTTP/1.1 200 OK Content-Security-Policy: upgrade-insecure-requests Accept-Ranges: bytes Pragma: no-cache Connection: keep-alive Transfer-Encoding: chunked Expires: -1 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Date: Sun, 04 Jun 2017 11:52:48 GMT Server: nginx X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000