HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 May 2019 04:56:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Drupal-Cache: HIT
Etag: "1558325190-0"
Content-Security-Policy: default-src 'self'; script-src  'unsafe-inline' 'unsafe-eval' 'self' *.cmog.org *.google-analytics.com *.hotjar.com *.adroll.com *.googleapis.com *.newrelic.com *.jquery.com *.nr-data.net *.google.com *.gstatic.com *.authorize.net *.facebook.net data:; object-src 'self' *; style-src 'self' 'unsafe-inline' *.cmog.org; img-src 'self' * data: blob:; media-src 'self' *.youtube.com *.youtu.be; frame-src *.cmog.org *.hotjar.com *.youtube.com *.google.com *.vimeo.com *.culturalspot.org; frame-ancestors 'self' *.cmog.org *.hotjar.com; child-src *.cmog.org *.youtube.com *.hotjar.com; font-src *.cmog.org data: 'self' https://cdn.joinhoney.com  https://fonts.gstatic.com; connect-src *.cmog.org https://*.hotjar.com wss://*.hotjar.com *.google-analytics.com *.optimalworkshop.com *.g.doubleclick.net  *.facebook.net *.authorize.net *.hotjar.io; report-uri /report-csp-violation
X-Content-Security-Policy: default-src 'self'; script-src  'unsafe-inline' 'unsafe-eval' 'self' *.cmog.org *.google-analytics.com *.hotjar.com *.adroll.com *.googleapis.com *.newrelic.com *.jquery.com *.nr-data.net *.google.com *.gstatic.com *.authorize.net *.facebook.net data:; object-src 'self' *; style-src 'self' 'unsafe-inline' *.cmog.org; img-src 'self' * data: blob:; media-src 'self' *.youtube.com *.youtu.be; frame-src *.cmog.org *.hotjar.com *.youtube.com *.google.com *.vimeo.com *.culturalspot.org; frame-ancestors 'self' *.cmog.org *.hotjar.com; child-src *.cmog.org *.youtube.com *.hotjar.com; font-src *.cmog.org data: 'self' https://cdn.joinhoney.com  https://fonts.gstatic.com; connect-src *.cmog.org https://*.hotjar.com wss://*.hotjar.com *.google-analytics.com *.optimalworkshop.com *.g.doubleclick.net  *.facebook.net *.authorize.net *.hotjar.io; report-uri /report-csp-violation
X-WebKit-CSP: default-src 'self'; script-src  'unsafe-inline' 'unsafe-eval' 'self' *.cmog.org *.google-analytics.com *.hotjar.com *.adroll.com *.googleapis.com *.newrelic.com *.jquery.com *.nr-data.net *.google.com *.gstatic.com *.authorize.net *.facebook.net data:; object-src 'self' *; style-src 'self' 'unsafe-inline' *.cmog.org; img-src 'self' * data: blob:; media-src 'self' *.youtube.com *.youtu.be; frame-src *.cmog.org *.hotjar.com *.youtube.com *.google.com *.vimeo.com *.culturalspot.org; frame-ancestors 'self' *.cmog.org *.hotjar.com; child-src *.cmog.org *.youtube.com *.hotjar.com; font-src *.cmog.org data: 'self' https://cdn.joinhoney.com  https://fonts.gstatic.com; connect-src *.cmog.org https://*.hotjar.com wss://*.hotjar.com *.google-analytics.com *.optimalworkshop.com *.g.doubleclick.net  *.facebook.net *.authorize.net *.hotjar.io; report-uri /report-csp-violation
X-Frame-Options: DENY
Strict-Transport-Security: max-age=1000; includeSubDomains
From-Origin: http://glassapp.cmog.org
Content-Language: en
X-Generator: Drupal 7 (http://drupal.org)
Link: </content/front-page>; rel="canonical",</node/11>; rel="shortlink"
Cache-Control: public, max-age=86400
Last-Modified: Mon, 20 May 2019 04:06:30 GMT
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Vary: Cookie,Accept-Encoding
X-Request-ID: 1783138a2a095eb531071522d2eba178
X-AH-Environment: prod
X-Acquia-Application-UUID: 4d73aeed-7ff0-4bb4-b4dc-e589f0454c49
X-Acquia-Application-Trace: XOIzd6wFAYMAAFoTFBwAAABl