Access-Control-Allow-Methods: GET, POST, OPTIONS Vary: Accept-Encoding Vary: Accept-Encoding Set-Cookie: ua=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Content-Type: text/html; charset=utf-8 Set-Cookie: SESSION=csom1jaa75qpch75a0htm55mc1; path=/; secure; HttpOnly Cache-Control: no-store, no-cache, must-revalidate Server: nginx Date: Thu, 08 Jun 2017 03:13:58 GMT Content-Length: 1484 Access-Control-Allow-Origin: * Pragma: no-cache Access-Control-Allow-Credentials: true Expires: Thu, 19 Nov 1981 08:52:00 GMT HTTP/1.1 200 OK Connection: keep-alive X-Frame-Options: SAMEORIGIN