HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 227217
Content-Type: text/html; charset=utf-8
Set-Cookie: ASP.NET_SessionId=5p2j3cecdsamtpa5hxrya3mw; path=/; secure; HttpOnly; SameSite=Lax
Content-Security-Policy: default-src 'self' https://fonts.gstatic.com/ https://bmtmarketing.azureedge.net https://bmtblobdevelopment.blob.core.windows.net https://bmtblobstaging.blob.core.windows.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.sharethis.com https://az416426.vo.msecnd.net https://maps.googleapis.com https://www.googletagmanager.com http://tagmanager.google.com https://www.google-analytics.com https://code.jquery.com https://use.fontawesome.com https://via.bmt.org http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://code.jquery.com https://tagmanager.google.com; img-src https://img.youtube.com https://bmtmarketing.azureedge.net https://bmtblobdevelopment.blob.core.windows.net https://bmtblobstaging.blob.core.windows.net https://bmtblobproduction.blob.core.windows.net 'self' data: https://stats.g.doubleclick.net https://mt.google.com/ https://dashboard.umbraco.org https://*.sharethis.com https://maps.googleapis.com https://maps.gstatic.com https://projects.bmtcontent.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com/ads https://www.google.co.uk/ads https://ssl.gstatic.com https://www.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; frame-src 'self' https://www.youtube.com https://*.sharethis.com https://c.sharethis.mgr.consensu.org https://www.google.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; frame-ancestors 'self' my.sharpcloud.com; connect-src 'self' https://dc.services.visualstudio.com https://*.sharethis.com https://www.bmtintra.net https://link.socxo.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://dmtrk.net/signup.ashx; child-src https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;
Request-Context: appId=cid-v1:1b72fd02-3631-4b48-9e7b-2e1abdcfbdec
Access-Control-Expose-Headers: Request-Context
Arr-Disable-Session-Affinity: True
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Date: Sun, 17 May 2020 20:36:59 GMT