Content-Security-Policy: upgrade-insecure-requests Server: nginx/1.10.3 X-Magento-Cache-Control: max-age=86400, public, s-maxage=86400 Access-Control-Allow-Headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block Expires: Wed, 28 Dec 2016 09:22:00 GMT Connection: keep-alive Vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store X-Magento-Cache-Debug: MISS HTTP/1.1 200 OK X-Content-Type-Options: nosniff Access-Control-Allow-Methods: GET, OPTIONS Content-Type: text/html; charset=UTF-8 Access-Control-Allow-Origin: * Set-Cookie: mage-messages=%5B%5D; expires=Fri, 28-Dec-2018 09:22:00 GMT; Max-Age=31536000; path=/ X-Frame-Options: SAMEORIGIN Pragma: no-cache Date: Thu, 28 Dec 2017 09:22:00 GMT