HTTP/1.1 200 OK Date: Tue, 20 Jan 2026 20:52:25 GMT Server: Jetty(9.4.44.v20210927) X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Content-Type: text/html;charset=utf-8 ETag: W/"1e600e5568dabff011b4e34651a861a9-gzip" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 72d739f5-6afa-4d27-bc99-ee4e0b5de951 X-Runtime: 0.130467 Set-Cookie: archivesspace_session=a2Z5U1FFN0xHajlqQ2ZFcWFQWllrY0oramozMTdiZkZicE1NT1Q5Vyt0WmJQRGwrejBJQjJPbnpjdVZrYUVjMWlrLzVlOU5FMEtSUkRyeStNNlRwckQvcmNsRGdVTlQyL3hKdkpBeVEzQlg5bjhoR3E4Yi9QMllVTXI5MnpsWEc4RkVVVDlpdVBtbUh4SDhQblJudnl5eWNnYVpmYXpOWGJoaktZRUpwS3NpUE1xa29rT0RWencvZnVuRktxWVlXLS1xVjJxMnNxazZKWmExejZwR21Cd1RRPT0%3D--58adc243606801b8fcaba475ba9c7105e94da1e1; path=/; HttpOnly Vary: Accept-Encoding Content-Encoding: gzip Content-Security-Policy: frame-ancestors 'self'; Strict-Transport-Security: max-age=31536000; includeSubdomains; preload Content-Length: 4634