HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.0
X-AspNet-Version: 4.0.30319
Set-Cookie: EktGUID=bd9802ef-bc78-402d-bbb2-a851d151d4df; expires=Mon, 18-May-2020 22:27:22 GMT; path=/; HttpOnly
Set-Cookie: EkAnalytics=0; expires=Mon, 18-May-2020 22:27:22 GMT; path=/; HttpOnly
Set-Cookie: ASP.NET_SessionId=rbsfrrubimpmceagy43fqh0y; path=/; HttpOnly
Set-Cookie: ecm=user_id=0&isMembershipUser=0&site_id=&username=&new_site=/&unique_id=0&site_preview=0&langvalue=0&DefaultLanguage=1033&NavLanguage=1033&LastValidLanguageID=1033&DefaultCurrency=840&SiteCurrency=840&ContType=&UserCulture=1033&dm=capmetro.org&SiteLanguage=1033; path=/; secure; HttpOnly
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Content-Security-Policy: default-src 'self' data: https://cdnjs.cloudflare.com https://tagmanager.google.com https://www.googletagmanager.com https://capmetro.hafas.cloud https://maps.google.com https://action.dstillery.com https://www.google.com https://apis.google.com https://www.gstatic.com https://s.thebrighttag.com https://translate.googleapis.com http://s.btstatic.com https://s.btstatic.com https://geo1.ggpht.com https://geo2.ggpht.com https://geo3.ggpht.com https://cbks0.googleapis.com https://geo0.ggpht.com https://csi.gstatic.com https://maps.googleapis.com https://maps.gstatic.com http://www.youtube.com https://ssl.google-analytics.com https://fonts.googleapis.com https://gishost-osm-b.hacon.de https://s3.amazonaws.com https://fonts.gstatic.com https://i.icomoon.io https://translate.google.com https://www.google-analytics.com https://capmetro.hafas.de;                                                     frame-src 'self' https://app.powerbi.com https://tagmanager.google.com https://www.googletagmanager.com https://app.capmetro.org https://www.google.com/ http://www.youtube.com https://i.icomoon.io https://s3.amazonaws.com https://translate.google.com https://www.google-analytics.com https://capmetro.hafas.de https://capmetro.hafas.cloud;                                                      child-src 'self' https://tagmanager.google.com https://www.googletagmanager.com http://www.youtube.com https://translate.google.com https://s3.amazonaws.com https://capmetro.hafas.de https://capmetro.hafas.cloud;                                                     frame-ancestors 'self' https://app.powerbi.com https://tagmanager.google.com https://www.googletagmanager.com https://translate.google.com http://www.youtube.com https://capmetro.hafas.de https://capmetro.hafas.cloud;                                                     script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://tagmanager.google.com  https://www.googletagmanager.com https://bs.serving-sys.com https://googleads.g.doubleclick.net https://www.googleadservices.com/ https://www.googletagmanager.com http://s.btstatic.com/ https://static.ctctcdn.com https://static.ctctcdn.com/ https://apis.google.com https://translate.googleapis.com https://s.btstatic.com  https://s.thebrighttag.com https://maps.google.com https://maps.googleapis.com https://fonts.googleapis.com https://s3.amazonaws.com https://ssl.google-analytics.com https://fonts.gstatic.com https://i.icomoon.io https://translate.google.com https://www.google-analytics.com https://capmetro.hafas.de https://capmetro.hafas.cloud;                                                     style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://tagmanager.google.com  https://www.googletagmanager.com https://translate.googleapis.com/ https://fonts.googleapis.com https://s3.amazonaws.com https://fonts.gstatic.com https://i.icomoon.io https://translate.google.com https://www.google-analytics.com https://capmetro.hafas.de https://capmetro.hafas.cloud;
Public-Key-Pins: pin-sha256='U54s3MN0fqudJEp1gKvA9LS9YyzLKfQtf087F01XDNo='; max-age=10;includesubdomains;
Strict-Transport-Security: max-age=10
X-Frame-Options: SAMEORIGIN
Date: Sat, 18 May 2019 22:27:21 GMT
Set-Cookie: citrix_ns_id=D3+U5WDEiR2k64QywI2uGVvAsqoA000; Domain=.capmetro.org; Path=/; HttpOnly
X-Expires-Orig: None
X-Cache-Control-Orig: private
Cache-Control: max-age=0, must-revalidate, private
Transfer-Encoding: chunked