HTTP/1.1 200 OK
Server:XXXXXX
Date: Thu, 01 Aug 2019 11:44:34 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Vary: Accept-Encoding
Strict-Transport-Security: max-age=631139040; includeSubdomains
ETag: W/"3b17a0cdae272e535d2f6ce08944b9ea"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _ba-mybapension_session=3jO1BFm2q2aZf3L4iGZdf%2FfpIHHxeapDdglWoA8Go8Me9TWS8R1JY0N4baJgMhL2Gk%2BoV37uIqlWxdMI9pDujOnawKtB0onSiKyHEdaNBYZTzI9mLanjGi8ZtFr5qpADuTkwO9tLLwxFtuoo7cU%3D--OS2H8ASAFBiyWWVv--3kfXcWCiT2xQFQwDaBerGQ%3D%3D; path=/; secure; HttpOnly; SameSite=Lax
X-Request-Id: e2f738ce-745a-4148-954a-8fc1f79a3364
X-Runtime: 0.019706
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: origin-when-cross-origin
Content-Security-Policy: default-src https: 'self'; base-uri 'self'; block-all-mixed-content; child-src 'self' www.youtube.com mybapension-news.dev.ahc.com news.mybapension.com; connect-src wss: 'self' services.postcodeanywhere.co.uk; font-src 'self' data: www.mybapension.com; form-action 'self'; frame-ancestors 'none'; img-src 'self' piwik.ahc.uk.com matomo.ahc.com www.mybapension.com ssl.google-analytics.com; media-src 'self'; object-src 'self'; plugin-types application/x-shockwave-flash application/pdf; script-src 'unsafe-eval' 'unsafe-inline' 'self' matomo.ahc.com piwik.ahc.uk.com www.google-analytics.com www.google.com ssl.google-analytics.com www.gstatic.com; style-src 'self' 'unsafe-inline' ajax.googleapis.com www.google.com www.gstatic.com; upgrade-insecure-requests
Set-Cookie: cookiesession1=3D7D379C0HUTVBFKPJJP2MVKT394A08E;Path=/;HttpOnly
content-length: 8185