HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Set-Cookie: ASP.NET_SessionId=5xz4pawtjuzbruzejeaap5g2; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=15552001; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Public-Key-Pins: pin-sha256="xDkTIP4WjTPBd2a2t4UeO9V6nu+Ev1km6iru+rGGhC4="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg=";max-age=10; 
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' ajax.googleapis.com; script-src 'self' 'unsafe-eval'  'unsafe-inline' ajax.googleapis.com;
Date: Tue, 04 Jun 2019 11:38:38 GMT
Content-Length: 6029
X-FRAME-OPTIONS: SAMEORIGIN
Set-Cookie: BNES_ASP.NET_SessionId=/NfyIIWcDebX4U/jagRM7COpxkRvjvhUw2nQfx1I7iAmzMB2VK1wz+wYYrDPuFuK24GKkfzYmzgOE4wLDq5H5PypV0xltTegMWu24P3ienkJw/gkEJX/ow==; path=/; secure; HttpOnly