HTTP/1.1 200 OK
P3P: CP="Facebook has no P3P policy fb.me/p3p"
X-Frame-Options: DENY
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.facebook.com
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: no-cache
Vary: Origin
public-key-pins-report-only: max-age=500; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
access-control-allow-method: OPTIONS
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Cache-Control: private, no-cache, no-store, must-revalidate
Set-Cookie: fr=0onWg9JhzN1BTbUPs..BY9LMp.hR.AAA.0.0.BY9LMp.AWWsIT5F; expires=Sun, 16-Jul-2017 12:20:57 GMT; Max-Age=7776000; path=/; domain=.facebook.com; httponly
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/html
X-FB-Debug: lgtOpEeQ3CaaT7XNg/Q0TKqq2gNHXtVVyryqyW8+HK4kDeITNsxMadKk+dYVfP49O5cRyf3StF8pS2HLhVLdrA==
Date: Mon, 17 Apr 2017 12:20:57 GMT
Connection: keep-alive
Content-Length: 27474