Cache-Control: max-age=0, private, must-revalidate
Content-Security-Policy: default-src https: 'self'
Content-Type: text/html; charset=utf-8
Date: Thu, 05 Oct 2017 10:30:14 GMT
Etag: W/"7925fa7518879fd52b82d6c8c80dcc83"
Referrer-Policy: no-referrer
Server: nginx/1.13.4
Set-Cookie: _data-auth_session=YVlGUENtbExtNVBML0hZRTBmK1hrQVhDV2JrNlVxS1Vic01nQUNiRDFhbFJjbyt4UGxKbUhKMjdxS0FYcHVKa0U5U1grNGxxRitxbDRxTW1ENHA4Z2M3dkp6NHBjRGIxZE5qS1RYdFo1bWNibzFUWTRkNmd1ZnhzOFRDWlBHMzllZC8zUkpHUWprVzByWThsYU5qVk83NnRYRmwyVjEyVUFrUW5lZ1QzU2hsYU5uZGIzYUJINjNxd0ZoZlQ1cDdOLS0vbjl6OXZwMDBQamFZVUc5RTJxSm9BPT0%3D--707c57bd03e2fb5bf6de32440c6a04d57226505d; path=/; secure; HttpOnly
Status: 200
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Dc: gke gke
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 20f33681-c030-4d9e-9646-7cbdb7217953
X-Runtime: 0.012296
X-Xss-Protection: 1; mode=block