HTTP/1.1 200 OK
Date: Fri, 24 May 2019 20:40:41 GMT
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: 768ed0d5f9b61e73ac4612a128d0502c=svr3bfme0s99qaclh0rp262fvj; path=/; secure; HttpOnly
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Expires: Wed, 17 Aug 2005 00:00:00 GMT
Last-Modified: Fri, 24 May 2019 20:40:42 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' 'self' data:  *.vimeo.com *.google.com *.googleapis.com *.gstatic.com *.googleusercontent.com pbs.twimg.com *.hotjar.com connect.facebook.net www.google-analytics.com www.google.com *.addthis.com *.addthisedge.com www.facebook.com www.google-analytics.com www.springest.nl *.youtube.com *.youtube-nocookie.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.google.com;default-src 'self' * 127.0.0.1;img-src https: data:;
Content-Type: text/html; charset=utf-8
X-Backend: web01_vmm13
Server: PCX/No-Cache
Age: 0
X-Cache-Hit: No
X-Cache-Hits: 0
Accept-Ranges: bytes
Transfer-Encoding: chunked
Connection: keep-alive