HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Sep 2019 11:10:09 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: SECSESSID=slhgs2s4khctpt43839017cgah; path=/; secure; HttpOnly
content-security-policy: script-src 'self' 'nonce-27be9cafbf71cf17c9f38bdd428b937227666d4277154c09a4e4ef567d2a3e52' *.cloudfront.net *.youtube.com maps.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com flockler.com *.flockler.com *.vacancy-filler.co.uk *.raxcdn.com cdn.jsdelivr.net www.paypalobjects.com chart.apis.google.com code.jquery.com; object-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'
referrer-policy: no-referrer, strict-origin-when-cross-origin
feature-policy: camera 'none'; microphone 'none'
vary: X-Forwarded-Protocol
cache-control: private, must-revalidate
etag: "0bb76b2eec9711b545e0bcbfa1ed407d"
Strict-Transport-Security: max-age=15768000
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block