Strict-Transport-Security: max-age=15552000; includeSubDomains X-XSS-Protection: 1; mode=block Set-Cookie: oc5ahqglvdiv=i17ojlfnpf8adu1bl158u3nqo2; path=/; secure; HttpOnly Date: Tue, 27 Feb 2018 18:28:47 GMT Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict X-Download-Options: noopen X-Robots-Tag: none Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self';connect-src 'self' ;media-src 'self' blob:;child-src 'self' X-Frame-Options: SAMEORIGIN Cache-Control: no-cache, no-store, must-revalidate X-Permitted-Cross-Domain-Policies: none Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Set-Cookie: oc_sessionPassphrase=LMfoPeapIehBF5amrXqkC2jzSc0ktQgkszbwFy%2FBwqIjkaVqdRxHoSzaXwADpaV%2FxUyYI2rNvoR9sUAWjwYvTQUenWcvWI3kr9ZNcVAYOzGhD5TOWY8R2fH3GAgn%2F00I; path=/; secure; HttpOnly X-Permitted-Cross-Domain-Policies: none HTTP/1.1 200 OK Server: nginx/1.10.3 X-Robots-Tag: none X-Download-Options: noopen X-Content-Type-Options: nosniff Content-Type: text/html; charset=UTF-8 X-XSS-Protection: 1; mode=block Connection: keep-alive Content-Length: 10025 Vary: Accept-Encoding Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax X-Content-Type-Options: nosniff