HTTP/1.1 200 OK
Date: Fri, 17 May 2019 17:57:52 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: AWSALB=E6h7VNL6rsLOcpIUHUe6pHcdgZJ5LOkxc3KlAgnKD+nu2t260M+ncPfxN4cMjI1aleO6PonXByy/L3A+hJTlYWw6xcr6CK4C0s8JVbCgC9IPhCiSgaZJ5cxBMVMh; Expires=Fri, 24 May 2019 17:57:52 GMT; Path=/
Server: nginx
ETag: W/"3c75dd507464885c85afd4049ca415b5"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _bonkers_session=b752b40c9c940accdba7cd4972843f91; path=/; expires=Sat, 18 May 2019 17:57:52 -0000; HttpOnly; secure; SameSite=Lax
X-Request-Id: 8f8296b2-fffd-4f47-b448-9b91c3f54929
X-Runtime: 0.054659
Vary: Accept-Encoding
Strict-Transport-Security: max-age=631138519
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src https: 'self' ws: wss: gsa:; child-src https: 'self'; connect-src https: 'self' wss:; font-src https: 'self' 'unsafe-inline' data:; img-src https: 'self' 'unsafe-inline' data:; media-src https: 'self' 'unsafe-inline'; object-src https: 'self'; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; style-src https: 'self' 'unsafe-inline'; worker-src blob: