HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Server: nginx/1.13.12
Link: </assets/css/main.css>;rel=preload;as=style
Cache-Control: max-age=60, stale-while-revalidate=300, stale-if-error=864000
Content-Security-Policy: default-src 'self' data: *.coop.co.uk *.optimizely.com s3-eu-west-1.amazonaws.com s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.coop.co.uk cdn.embedly.com *.ensighten.com *.crazyegg.com *.google-analytics.com *.optimizely.com *.youtube.com *.ytimg.com *.facebook.net *.twitter.com s3-eu-west-1.amazonaws.com s3.amazonaws.com *.cloudfront.net cdn.polyfill.io *.algolia.net assets.digital.coop.co.uk optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com *.smartsurvey.co.uk; style-src * 'unsafe-inline'; img-src 'self' data: *.google.co.uk *.google.ie *.ensighten.com *.optimizely.com images.contentful.com images.ctfassets.net *.crazyegg.com www.google-analytics.com www.facebook.com *.cloudfront.net *.twitter.com *.doubleclick.net assets.digital.coop.co.uk www.google.com; font-src 'self' *.optimizely.com s3-eu-west-1.amazonaws.com s3.amazonaws.com assets.digital.coop.co.uk; media-src *; object-src youtube.com vimeo.com; frame-src 'self' https://youtube.com https://www.youtube.com https://vimeo.com *.doubleclick.net *.optimizely.com *.facebook.com fusiontables.google.com https://google.com https://www.google.com *.smartsurvey.co.uk; connect-src *.algolia.net *.algolianet.com *.optimizely.com;
X-Frame-Options: SAMEORIGIN
strict-transport-security: max-age=31557600
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 124310
Accept-Ranges: bytes
Date: Mon, 22 Jul 2019 22:54:22 GMT
Via: 1.1 varnish
Age: 0
Connection: keep-alive
X-Served-By: cache-dfw18647-DFW, cache-dfw18647-DFW
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1563836061.078881,VS0,VS0,VE1646
Vary: Accept-Encoding