1. Direct Open (Top level)
2. Iframe without sandbox config
3. Iframe with sandbox config
4. 2 + default http cookie