Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
X-XSS-Protection: 1; mode=block
X-Cloud-Trace-Context: 208262cf41aa9bd6ff3b2964565c06a8
X-Frame-Options: DENY
Expires: Sun, 08 Oct 2017 10:18:01 GMT
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache
X-Content-Type-Options: nosniff
HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self' 'sha256-qubJBVYFGdGcppwITOhdRYLozXS0at/2RuEEc5cZzGc=' 'sha256-lp7gDiDDHkOXJhp7/tLlE5027mcAP0BxefjITM+GRiM=' *.google.com http://www.googletagmanager.com https://www.googletagmanager.com *.googleapis.com https://www.gstatic.com maps.gstatic.com https://*.googleapis.com https://maps.gstatic.com http://www.google-analytics.com https://www.google-analytics.com https://apis.google.com; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com *.google.com fonts.googleapis.com https://fonts.googleapis.com; media-src 'self' https://*.googleapis.com; report-uri /csp; default-src 'self'; font-src 'self' fonts.googleapis.com fonts.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com; frame-src 'self' https://accounts.google.com https://play.google.com https://www.googletagmanager.com https://www.google.com; img-src 'self' blob: data: gg.google.com https://gg.google.com csi.gstatic.com *.googleapis.com *.googleusercontent.com maps.gstatic.com https://csi.gstatic.com https://www.gstatic.com https://*.googleapis.com https://maps.gstatic.com http://www.google-analytics.com https://www.google-analytics.com https://stats.g.doubleclick.net
Server: Google Frontend
Date: Sun, 08 Oct 2017 10:18:01 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4063
Set-Cookie: XSRF-TOKEN="1507457881:0da25802b2f454b9a12c955e57a11d6e2e302aeb"; Path=/; secure
Set-Cookie: session="eyJ1dWlkIjoiMDlkOWExYTctNDZhYy00OTU1LWI3OWQtZGQ4MTVkM2RiODU3In0\075|1507457881|e54faaf73e1c6302e07d9441f461539411ba248d"; Path=/; secure; HttpOnly