HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 May 2020 15:47:36 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store
Set-Cookie: csrftoken=f58eb04b7832d0f86828b7404e019fe166183ca66362e862c63fb99e40573efd; Expires=Fri, 05-Jun-2020 15:47:36 GMT; Max-Age=604800; Secure; Path=/
Vary: Cookie
Set-Cookie: session=.eJwFwVEOgyAMANC79NsPoFgKlzED22WZk6TIl_Hue--GNkyv_pUTCujKUl2siTHsTpk4cE3RRXE-q3giz9heREhBmEIj1JqzRLcmFN1hgW6f92aiYiYG5ZzHscC8ftvo05oMKPfz_AEM6iSW.XtEumA.lpEOmz02VqSpBiisrnDsLicUGQc; Secure; HttpOnly; Path=/; SameSite=Lax
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
Expect-CT: enforce, max-age=1209600, report-uri='https://3bca3d665311907a9472c2b8373ab3f6.report-uri.com/r/d/ct/enforce'
Feature-Policy: accelerometer 'none';ambient-light-sensor 'none';autoplay 'self';camera 'none';display-capture 'none';document-domain 'none';fullscreen 'self';geolocation 'none';gyroscope 'none';layout-animations 'none';legacy-image-formats 'none';magnetometer 'none';microphone 'none';midi 'none';oversized-images 'self';payment 'self';picture-in-picture 'none';publickey-credentials 'none';speaker 'self';sync-xhr 'self';usb 'none';wake-lock 'none';
Referrer-Policy: strict-origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-eval' data: https://js.stripe.com https://*.braintreegateway.com https://api.github.com https://www.google-analytics.com https://heapanalytics.com https://*.heapanalytics.com; img-src 'self' data: https://pbs.twimg.com https://checkout.paypal.com https://*.braintreegateway.com heapanalytics.com; style-src 'self' 'unsafe-inline'; media-src https://*.amazonaws.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com www.youtube.com player.vimeo.com checkout.paypal.com; object-src 'self'; connect-src 'self' api.github.com www.google-analytics.com heapanalytics.com https://avatar-cdn.atlassian.com https://api.stripe.com;
Content-Encoding: gzip