HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 47642
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/10.0
Set-Cookie: ASP.NET_SessionId=qagstkczq4dajtl2tmn1okj0; path=/; HttpOnly
Set-Cookie: ASP.NET_SessionId=qagstkczq4dajtl2tmn1okj0; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
Content-Security-Policy: default-src 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.congressweb.com https://cdnjs.cloudflare.com/ajax/libs/ *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com https://code.jquery.com;  style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com;  img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com https://archaeology.blob.core.windows.net https://images.saa.org https://documents.saa.org data: blob: *.eloqua.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:;  connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com;  media-src 'self' data: blob:;  frame-src 'self' https://www.congressweb.com/ https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com;
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Powered-By: ASP.NET
Date: Mon, 22 Jul 2019 15:19:33 GMT