X-Frame-Options: SAMEORIGIN Access-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,OPTIONS X-Request-Id: 666aaa48-62ca-4432-808b-c11e46d9427a Connection: keep-alive Access-Control-Allow-Headers: Access-Control-Request-Headers,Access-Control-Request-Method,Accept,Accept-Encoding,Accept-Language,Content-Length,Cookie,Host,Origin,Referer,User-Agent,Content-Type,X-Requested-With,X-CSRF-Token,If-Modified-Since,If-None-Match X-Content-Type-Options: nosniff Set-Cookie: _launch_ly_session=bbb9f8ccbd915732e5e122240cabe468; path=/; HttpOnly Vary: Accept-Encoding X-XSS-Protection: 1; mode=block HTTP/1.1 200 OK Access-Control-Allow-Origin: ETag: "abe01e24aa2ec5e509a226f7b8c12b10" Vary: Accept-Encoding X-Runtime: 0.130412 Status: 200 OK Access-Control-Expose-Headers: ETag Server: nginx Content-Type: text/html; charset=utf-8 Access-Control-Allow-Credentials: true Date: Wed, 07 Feb 2018 19:52:14 GMT Access-Control-Request-Method: * Cache-Control: max-age=0, private, must-revalidate X-Rack-Cache: miss Content-Length: 179699