HTTP/1.1 200 OK
Date: Fri, 10 May 2019 03:59:31 GMT
Cache-Control: no-cache, max-age=1, private, must-revalidate
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImNtQnNuSmxpZTNGdmJ3YVBGRkdQelE9PSIsInZhbHVlIjoic0JQdDhEdUN2R0JiQXkrdFdDYXhLZWhlVVNPQ0FhYjFFZDk3UzAwTFlJZ29sbUJLSWp6QjZ6N2VaSmhXcGFLbiIsIm1hYyI6IjhhMjFlMjJhN2IzODViZDZkMDcwYmMwMjYyZDYwZTczYTU0ZGYxYmEzZDM0YTU4YTc5Y2M2MmVmN2I4NzZkMGMifQ%3D%3D; expires=Fri, 10-May-2019 05:59:31 GMT; Max-Age=7200; path=/; HttpOnly; secure
Set-Cookie: laravel_session=eyJpdiI6IjhRMFVSZjNTUVJVaVJwYWhrbnByWlE9PSIsInZhbHVlIjoiUURwOTlJZ0VUdUNhVHRqWmJcL2NPRWlpTkFYNXcxcU5UREhVdmZ3aFBJYWxnendMT1FHak03NFdsQzI4N0dcL0pOIiwibWFjIjoiM2FiZGFlODM0NTdiMjUyY2Y0OTBmYmZmMTM3NzExMDc3YTJhYjE2MTE2ZGJmMmI5MWUwMjA4NTliYmY2MTc4MCJ9; expires=Fri, 10-May-2019 05:59:31 GMT; Max-Age=7200; path=/; httponly; secure
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
Upgrade: h2
Connection: close
Vary: Accept-Encoding
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.google-analytics.com  *.google.com *.gstatic.com *.googleapis.com data:; script-src aval-dev.vis-design.com.ua 'unsafe-inline' 'unsafe-eval'  *.google.com *.gstatic.com  *.googleapis.com *.googletagmanager.com *.google-analytics.com  data: 'self'; style-src * 'unsafe-inline'; connect-src *.google-analytics.com *.googleapis.com *.gstatic.com data: 'self'
Content-Type: text/html; charset=UTF-8
Set-Cookie: TS013dcbb2=011ab13b3ba955002f8ad4499732f3a738434e9b5b76653c1aa1f215cce9fda67cef45122d471d51d3abcbefd394d308d8942fb40a378a2632d70b4a98ee94c932059e33e5f2758436e5b75be04a16d5d95a13ff90; Path=/; Domain=.www.aval.ua; Secure; HTTPOnly