Server: Apache Content-Security-Policy: default-src * 'self' https: data: 'unsafe-inline' 'unsafe-eval'; connect-src * 'self' https: data: 'unsafe-inline' 'unsafe-eval'; child-src * 'self' https: 'unsafe-inline' 'unsafe-eval'; script-src * 'self' https: 'unsafe-inline' 'unsafe-eval'; media-src * 'self' https: HTTP/1.1 200 OK X-Powered-By: PHP/5.6.30 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Date: Sat, 01 Jul 2017 14:59:39 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Content-Type: text/html; charset=UTF-8 Set-Cookie: myapp=409e5ca00f71836ed199b227ad565f51; expires=Sat, 01-Jul-2017 15:59:39 GMT; Max-Age=3600; path=/; HttpOnly Set-Cookie: myapp=756ca057b3ed1bdb77c9c724a1970de8; expires=Sat, 01-Jul-2017 15:59:39 GMT; Max-Age=3600; path=/; HttpOnly Transfer-Encoding: chunked Pragma: no-cache