Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS,HEAD,TRACE Date: Sat, 10 Feb 2018 16:44:07 GMT Vary: Accept-Encoding,User-Agent Connection: keep-alive Set-Cookie: SUPRSessionId=n040cpp34c0657n35m8ra4ismo; expires=Sat, 10-Feb-2018 18:20:07 GMT; Max-Age=5760; path=/; domain=supr.com Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Set-Cookie: supr_com_cartId=NjY0MjM3MjUwMzE%3D; expires=Sat, 17-Feb-2018 16:44:08 GMT; Max-Age=604800; path=/ Link: <http://haida-deutschland.de/wp-json/>; rel="https://api.w.org/" Access-Control-Allow-Origin: Cache-Control: max-age=2520, private, must-revalidate HTTP/1.1 200 OK Access-Control-Allow-Headers: Accept,Accept-Charset,Accept-Encoding,Accept-Language,Access-Control-Request-Method,Access-Control-Request-Headers,Access-Control-Allow-Credentials,Access-Control-Allow-Origin,Authorization,Content-Length,Content-Type,Cookie,Host,Key,Origin,Referer,User-Agent,X-CustomHeader,X-CSRF-Token,X-Requested-With Transfer-Encoding: chunked P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Content-Type: text/html; charset=UTF-8 Accept-Ranges: none Timing-Allow-Origin: * Expires: Sat, 10 Feb 2018 17:26:07 GMT Server: Apache/2.4.25 (Debian)