f
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2