HTTP/1.1 200 
Vary: Accept-Encoding
Cache-Control: no-cache
Content-Type: text/html;charset=UTF-8
Content-Security-Policy: script-src 'self' 'unsafe-inline' cdn.thefa.com www.google-analytics.com maps.google.com maps.googleapis.com ajax.googleapis.com connect.facebook.net po.st *.po.st button.ecal.com track.adform.net b.scorecardresearch.com;
Date: Thu, 09 May 2019 18:12:35 GMT
Expires: Wed, 31 Dec 1969 23:59:59 GMT
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Transfer-Encoding: chunked
Content-Language: en-GB
Set-Cookie: JSESSIONID=0F017031BCC97CD632A4400E812045B8; Path=/; HttpOnly
X-Frame-Options: deny