HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sun, 19 May 2019 15:29:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
ETag: W/"353df64ece64d225482c504d03d6e752"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _crm_app_session=9I6C4BiA%2FdphHIW%2BAeHnW9CdkoWhB1yZ8QOMh%2FNd%2BgqNefDriwiYTAJImNWiI3hSjgX5d9y5guMPrd1lIZY7HHyxJ5tcBtHXHazOhmEgQPbTDwd5oPGKCZIqo1Wx7%2Bsht9r5E87eKcEaujm%2BSeU%3D--essZD0DmMvnW1Q7u--3WbO%2FnC2J2ggRjBweBvEJQ%3D%3D; path=/; HttpOnly
X-Request-Id: dceb052b-0d92-4e99-9783-3d943b7bfe9b
X-Runtime: 0.075022
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Strict-Transport-Security: max-age=15768000
Cache-Control: no-transform
Content-Security-Policy: default-src 'self'; script-src 'self'  'unsafe-eval' 'unsafe-inline' https://ssl.google-analytics.com https://cdn.polyfill.io; img-src 'self' https://ssl.google-analytics.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com; frame-src 'self'; object-src 'none'; connect-src 'self' ws:
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type