HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 8271
Content-Type: text/html; charset=utf-8
Server: Apache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=0
Expires: Sun, 31 May 2020 19:55:10 GMT
Content-Encoding: gzip
Content-Security-Policy: default-src 'self' data: *.coop.co.uk *.optimizely.com s3-eu-west-1.amazonaws.com s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.coop.co.uk cdn.embedly.com *.ensighten.com *.crazyegg.com *.google-analytics.com *.optimizely.com *.youtube.com *.ytimg.com *.facebook.net *.twitter.com s3-eu-west-1.amazonaws.com s3.amazonaws.com *.cloudfront.net cdn.polyfill.io *.algolia.net assets.digital.coop.co.uk optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com; style-src * 'unsafe-inline'; img-src 'self' data: *.ensighten.com *.optimizely.com images.contentful.com images.ctfassets.net *.crazyegg.com www.google-analytics.com www.facebook.com *.cloudfront.net *.twitter.com *.doubleclick.net assets.digital.coop.co.uk www.google.com www.google.co.uk; font-src 'self' *.optimizely.com s3-eu-west-1.amazonaws.com s3.amazonaws.com assets.digital.coop.co.uk; media-src *; object-src youtube.com vimeo.com; frame-src https://youtube.com https://www.youtube.com https://vimeo.com *.doubleclick.net *.optimizely.com *.facebook.com fusiontables.google.com https://google.com https://www.google.com; connect-src *.algolia.net *.algolianet.com *.optimizely.com;
Accept-Ranges: bytes
Date: Sun, 31 May 2020 19:55:10 GMT
Via: 1.1 varnish
Age: 0
X-Served-By: cache-lga21937-LGA, cache-lga21937-LGA
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1590954910.460306,VS0,VS0,VE376
Vary: Accept-Encoding,User-Agent