HTTP/1.1 200 OK
Server: nginx/1.15.11
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.1.28
Cache-Control: no-cache, private
Date: Mon, 15 Apr 2019 11:29:32 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6Im9QRTN2K214ZEpjdVV3SkpPTmV4M2c9PSIsInZhbHVlIjoiQURHQ3NMR2tjK3dDVjV4VHQ4U3d1Y1lRNHRObGVQb2VRMFVkQXN2Q0I2YWFibml5RGJvTzEwc2oyOTE5ekVVOCIsIm1hYyI6IjA2NjQzNGEyYjQ1MTczMWM1OWI1MDYzYjBjMDEwZWYzNWI4MThlYjkyZGI0ZDhjODQ4YzYyNWE0YjM5NTkzMzUifQ%3D%3D; expires=Mon, 15-Apr-2019 13:29:32 GMT; Max-Age=7200; path=/
Set-Cookie: sbs_soft_session=qWnKULt6RhW0Y0FqvJ6CeaGsZkj6iw0bOWIocgF9; expires=Mon, 15-Apr-2019 13:29:32 GMT; Max-Age=7200; path=/; httponly
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src https: data: wss:; style-src https: http://fonts.googleapis.com http://fonts.google.com 'self' 'unsafe-inline'; script-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: 'self' data: 'unsafe-inline'