Set-Cookie: cfce=1; Path=/; Secure Date: Mon, 19 Jun 2017 00:24:38 GMT Set-Cookie: tyFl=de_de; Path=/; Secure X-Frame-Options: SAMEORIGIN Set-Cookie: tyBl=de_de; Path=/; Secure Content-Type: text/html;charset=utf-8 Content-Security-Policy: default-src 'self' *.facebook.com *.facebook.net www.youtube-nocookie.com player.vimeo.com www.youtube.com; img-src 'self' blob: data: age *.twitter.com *.twimg.com cdnjs.cloudflare.com analytics.lukb.ch facebook.net facebook.com www.google-analytics.com stats.g.doubleclick.net scontent.xx.fbcdn.net *.facebook.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com platform.twitter.com facebook.net facebook.com fonts.googleapis.com; script-src data: 'self' 'unsafe-inline' 'unsafe-eval' *.twitter.com cdn.syndication.twimg.com cdn.jsdelivr.net cdnjs.cloudflare.com analytics.lukb.ch facebook.net facebook.com connect.facebook.net ajax.googleapis.com www.google-analytics.com google-analytics.com; connect-src 'self' google-analytics.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com X-XSS-Protection: 1; mode=block Pragma: no-cache X-Content-Type-Options: nosniff Transfer-Encoding: chunked Server: Apache Set-Cookie: AL_SESS-S=AadBnPORsX72RuiinnolITYe1fxkBngW3tVHqHXd2VFQ68hLKrHf_1x32IDXp5d9oWMs; Path=/; Secure; HttpOnly Expires: Mon, 19 Jun 2017 00:24:38 GMT Set-Cookie: PHPSESSID=lhbnmli7rs84lhljur66n68f12; Path=/; Secure; HttpOnly HTTP/1.1 200 OK Vary: Host,Referer Set-Cookie: XSRF-TOKEN=FgvnkkhBgMwosb1uJ4W%2FTtmgxuytI46ynmynECB4vgY%3D; Path=/; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload