Strict-Transport-Security: max-age=31536000; includeSubdomains Server: nginx Set-Cookie: PHPSESSID=ba1578ded548c3b53417f749b72a78b3; path=/; secure; HttpOnly Access-Control-Allow-Credentials: true Transfer-Encoding: chunked Cache-Control: public Set-Cookie: PHPSESSID=f5cc8bf1f0a75772cf40d6c1da17c25b; path=/; secure; HttpOnly Connection: keep-alive Vary: Accept-Encoding Pragma: no-cache Expires: Thu, 19 Nov 1981 08:52:00 GMT HTTP/1.1 200 OK X-Frame-Options: SAMEORIGIN Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: text/html; charset=utf-8 Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Date: Sun, 30 Jul 2017 13:36:30 GMT