Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS,HEAD,TRACE Date: Tue, 13 Mar 2018 08:32:09 GMT Vary: Accept-Encoding,User-Agent Connection: keep-alive Set-Cookie: SUPRSessionId=vne5ea2jvd5jqavdjpt8vjtcrm; expires=Tue, 13-Mar-2018 10:08:09 GMT; Max-Age=5760; path=/; domain=supr.com Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Set-Cookie: supr_com_cartId=NzQxNTU5MzU3NDE%3D; expires=Tue, 20-Mar-2018 08:32:09 GMT; Max-Age=604800; path=/ Link: <http://www.harztec-modellbau-shop.de/wp-json/>; rel="https://api.w.org/" Access-Control-Allow-Origin: Cache-Control: max-age=2520, private, must-revalidate HTTP/1.1 200 OK Access-Control-Allow-Headers: Accept,Accept-Charset,Accept-Encoding,Accept-Language,Access-Control-Request-Method,Access-Control-Request-Headers,Access-Control-Allow-Credentials,Access-Control-Allow-Origin,Authorization,Content-Length,Content-Type,Cookie,Host,Key,Origin,Referer,User-Agent,X-CustomHeader,X-CSRF-Token,X-Requested-With Transfer-Encoding: chunked P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Content-Type: text/html; charset=UTF-8 Accept-Ranges: none Timing-Allow-Origin: * Expires: Tue, 13 Mar 2018 09:14:09 GMT Server: Apache/2.4.25 (Debian)