Cache-Control: private, no-store, no-cache, must-revalidate, proxy-revalidate Server: nginx/1.12.2 Connection: keep-alive Content-Security-Policy: default-src 'self' curatedcourses.org;script-src 'self' 'unsafe-eval' 'unsafe-inline' http://ajax.googleapis.com https://ajax.googleapis.com http://www.google-analytics.com https://www.google-analytics.com http://oss.maxcdn.com https://oss.maxcdn.com http://cdn.socket.io https://cdn.socket.io http://checkout.stripe.com https://checkout.stripe.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://sagecell.sagemath.org https://sagecell.sagemath.org http://cdn.mathjax.org https://cdn.mathjax.org;object-src 'none';img-src 'self' data: http://cdn.mathjax.org https://cdn.mathjax.org http://sagecell.sagemath.org https://sagecell.sagemath.org http://img2-ak.lst.fm https://gravatar.com https://avatars.githubusercontent.com https://*.googleusercontent.com http://pbs.twimg.com https://pbs.twimg.com http://*.4sqi.net https://*.4sqi.net http://*.media.tumblr.com http://userserve-ak.last.fm http://graph.facebook.com https://graph.facebook.com http://*.fbcdn.net https://*.fbcdn.net http://*.ytimg.com https://*.ytimg.com http://img.youtube.com https://img.youtube.com http://fbcdn-profile-a.akamaihd.net https://fbcdn-profile-a.akamaihd.net http://github.global.ssl.fastly.net https://github.global.ssl.fastly.net http://chart.googleapis.com https://chart.googleapis.com http://www.google-analytics.com https://www.google-analytics.com http://images.amazon.com/ https://images.amazon.com/ http://linear.ups.edu/ https://linear.ups.edu/ http://linear.pugetsound.edu/ https://linear.pugetsound.edu/;media-src 'self';frame-src http://docs.google.com http://www.youtube.com https://docs.google.com https://www.youtube.com http://linear.ups.edu/ https://linear.ups.edu/;font-src 'self' http://cdn.mathjax.org https://cdn.mathjax.org http://sagecell.sagemath.org https://sagecell.sagemath.org http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com htp://themes.googleusercontent.com https://themes.googleusercontent.com;connect-src 'self' http://sagecell.sagemath.org https://sagecell.sagemath.org ws://localhost:8000 ws://sagecell.sagemath.org wss://sagecell.sagemath.org wss://curatedcourses.org/ https://api.github.com;style-src 'self' data: 'unsafe-inline' http://cdn.mathjax.org https://cdn.mathjax.org http://sagecell.sagemath.org https://sagecell.sagemath.org http://fonts.googleapis.com https://fonts.googleapis.com http://checkout.stripe.com https://checkout.stripe.com http://*.ytimg.com https://*.ytimg.com;report-uri /report-violation;sandbox allow-same-origin allow-forms allow-scripts Expires: 0 Content-Length: 9892 ETag: W/"26a4-YgZ+wuZKN6UpQt5LqhBgcg" Date: Mon, 12 Feb 2018 07:24:17 GMT HTTP/1.1 200 OK Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Content-Type: text/html; charset=utf-8 X-Download-Options: noopen Pragma: no-cache set-cookie: sid=s%3A2O-z25KUVHYsJ7JVKiGaVKI89gEJ4mhE.zDrY%2Fv7tZ9FM7KI451zx30%2BZW%2FUI3NIORocuLnYaO3M; Path=/; Expires=Mon, 19 Feb 2018 07:24:17 GMT; HttpOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding