| Server | nginx/1.12.1 |
| Content-Type | text/html; charset=utf-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| set-cookie | festival=on; path=/; expires=Sat, 02 Jun 2018 12:45:45 GMT; max-age=15552000; HttpOnly |
| cache-control | max-age=0, private, must-revalidate |
| x-request-id | oc5494r4r1d47aod5vkn28et0sttti0a |
| x-app-version | 0.0.8-7365f67c |
| vary | Origin |
| access-control-allow-origin | null |
| access-control-expose-headers | |
| access-control-allow-credentials | true |
| x-xss-protection | 1; mode=block |
| Strict-Transport-Security | max-age=63072000; includeSubDomains |
| X-Frame-Options | SAMEORIGIN, DENY |
| X-Content-Type-Options | nosniff, nosniff |
| Content-Encoding | gzip |