X-Frame-Options: SAMEORIGIN Access-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,OPTIONS X-Request-Id: c40400b7-f745-4c9a-a330-da48f1dc1154 Connection: keep-alive Access-Control-Allow-Headers: Access-Control-Request-Headers,Access-Control-Request-Method,Accept,Accept-Encoding,Accept-Language,Content-Length,Cookie,Host,Origin,Referer,User-Agent,Content-Type,X-Requested-With,X-CSRF-Token,If-Modified-Since,If-None-Match X-Content-Type-Options: nosniff Set-Cookie: _launch_ly_session=3d37546f14f2321a3c2f78d05e4d5489; path=/; HttpOnly Vary: Accept-Encoding X-XSS-Protection: 1; mode=block HTTP/1.1 200 OK Access-Control-Allow-Origin: ETag: "57b02e6920c22ee9da80edcc0c7e2f9f" Vary: Accept-Encoding X-Runtime: 0.041527 Status: 200 OK Access-Control-Expose-Headers: ETag Server: nginx Content-Type: text/html; charset=utf-8 Access-Control-Allow-Credentials: true Date: Fri, 08 Dec 2017 08:15:20 GMT Access-Control-Request-Method: * Cache-Control: max-age=0, private, must-revalidate X-Rack-Cache: miss Content-Length: 13960