HTTP/2 302 cache-control: no-store, no-cache, must-revalidate content-security-policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com content-type: text/html; charset=UTF-8 date: Tue, 14 Apr 2026 04:00:21 GMT expires: Thu, 19 Nov 1981 08:52:00 GMT location: /auth/login?redirect=%2F pragma: no-cache server: nginx set-cookie: passbolt_session=b3790e501b3588785049c60b517a2320; path=/; HttpOnly; SameSite=Lax strict-transport-security: max-age=15552000; includeSubDomains; preload x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block