| Server | Apache |
| X-Powered-By | PHP/5.6.30 |
| P3P | CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" |
| Expires | Mon, 1 Jan 2001 00:00:00 GMT |
| Pragma | no-cache |
| X-Mod-Pagespeed | 1.11.33.4-0 |
| Vary | Accept-Encoding,User-Agent |
| Content-Encoding | gzip |
| X-UA-Compatible | IE=edge,chrome=1 |
| Content-Security-Policy-Report-Only | default-src 'self' http: https: *.hotjar.com *.typekit.net *.vimeo.com *.google-analytics.com *.membogo.com js-agent.newrelic.com bam.nr-data.net fonts.googleapis.com *.hewitt.ca www.hewitt.ca *.hpjcc.com *.googleapis.com fonts.gstatic.com *.addthis.com *.addthisedge.com www.googleadservices.com www.google.com *.agencehpj.com 'unsafe-eval' 'self' 'unsafe-inline' data: ; report-uri https://bb8.agencehpj.com/csp |
| Content-Type-Options | nosniff |
| Cache-Control | no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0, no-cache |
| Content-Type | text/html; charset=utf-8 |
| Access-Control-Allow-Origin | * |
| X-Frame-Options | SAMEORIGIN |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 1; mode=block; |