HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Security-Policy: default-src 'self'; style-src * 'unsafe-inline'; script-src 'self' https://www.google-analytics.com; img-src 'self' https://www.google-analytics.com
Content-Type: text/html; charset=utf-8
Date: Mon, 11 Nov 2019 07:01:15 GMT
Expires: 0
Pragma: no-cache
Referrer-Policy: no-referrer-when-downgrade
Server: Caddy
Set-Cookie: csrf_token=GWY+z4OQRi/Qh3y0AP/xA2eL5hERpQhaTVZkGYBYZOc=; Path=/; HttpOnly; Secure
Strict-Transport-Security: max-age=16000000; includeSubDomains; preload
Vary: Cookie
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Transfer-Encoding: chunked