HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://d2zz4thflisoea.cloudfront.net
Cache-Control: no-cache, no-store
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.segment.io https://cdn.segment.com https://d13he6skx5qn9f.cloudfront.net https://sessions.bugsnag.com http://d2wy8f7a9ursnm.cloudfront.net https://notify.bugsnag.com https://app.pendo.io https://cdn.pendo.io https://pendo-io-static.storage.googleapis.com https://pendo-static-6189065625403392.storage.googleapis.com https://bam.nr-data.net https://js-agent.newrelic.com https://tinymce.cachefly.net https://maxcdn.bootstrapcdn.com https://oss.maxcdn.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://d2zz4thflisoea.cloudfront.net https://dnu7uhq6qumrf.cloudfront.net https://*.namely.com https://s3.amazonaws.com https://sbs-assets.namely.com https://player.vimeo.com; font-src 'self' data: https://f.namely.com https://maxcdn.bootstrapcdn.com https://dzmqh46i6l1ir.cloudfront.net; img-src 'self' data: https://app.pendo.io https://pendo-static-6189065625403392.storage.googleapis.com https://d2zz4thflisoea.cloudfront.net https://dnu7uhq6qumrf.cloudfront.net; report-uri /CSP_Report.aspx;
Content-Type: text/html; charset=utf-8
Date: Tue, 16 Jul 2019 13:45:34 GMT
Expires: -1
Pragma: no-cache
Server: Microsoft-IIS/10.0
Set-Cookie: ASP.NET_SessionId=u2vz2njespdyctavf332ybs2; path=/; secure; HttpOnly
Set-Cookie: namely_domain=namely.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
Set-Cookie: .NamelyPayroll=; expires=Tue, 12-Oct-1999 04:00:00 GMT; path=/; secure; HttpOnly
Set-Cookie: ASP.NET_SessionId=; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-AspNet-Version: 4.0.30319
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOW-FROM https://app.pendo.io
X-Powered-By: ASP.NET
X-UA-Compatible: IE=Edge
X-XSS-Protection: 1; mode=block
Content-Length: 38125
Connection: keep-alive