| Cache-Control | private |
| Content-Type | text/html; charset=utf-8 |
| Content-Encoding | gzip |
| Vary | Accept-Encoding |
| Server | Microsoft-IIS/8.5 |
| X-AspNet-Version | 4.0.30319 |
| X-Powered-By | ASP.NET |
| P3P | CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE" |
| X-XSS-Protection | 0 |
| Access-Control-Allow-Origin | * |
| Access-Control-Allow-Headers | Content-Type, Accept, Authorization, X-Request-With |
| Access-Control-Allow-Methods | POST, GET, OPTIONS |
| Access-Control-Allow-Credentials | true |
| Access-Control-Max-Age | 1728000 |
| Connection | close |
| Strict-Transport-Security | max-age=31536000; includeSubDomains |