HTTP/2 302 cache-control: no-store, no-cache, must-revalidate content-security-policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com content-type: text/html; charset=UTF-8 date: Sun, 05 Apr 2026 08:39:31 GMT expires: Thu, 19 Nov 1981 08:52:00 GMT location: /auth/login?redirect=%2F pragma: no-cache server: nginx set-cookie: passbolt_session=19de39a55e7976fc68a4690d270f2c3c; path=/; HttpOnly; SameSite=Lax strict-transport-security: max-age=15552000; includeSubDomains; preload x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block