Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Content-Type: text/html; charset=UTF-8 pragma: no-cache Set-Cookie: XSRF-TOKEN=eyJpdiI6IlFRU1BuVFI4STc0eGRIblwvVDdSeThBPT0iLCJ2YWx1ZSI6Ing1Sk5GMmYxNXVORVRtMzZHN1lxanJtSmx3eVNIT0dnK3hiVFdzN0Jnbk9sUDhFTVdPdE5kcVwvbjVlQVwvUG9ZSVlLS202OCtSWkk0RUhLOURaUWwrZGc9PSIsIm1hYyI6IjQ1MzQxZDM0YjFhZjAxOTI1ZDg2M2MwOWVkNTBlYjc5Mzc1MDU4ZGYzYjRjMzMxMzc3MTlhNjJiNjk2ZTQ3ZWIifQ%3D%3D; expires=Sat, 18-Jun-2022 05:42:58 GMT; Max-Age=157680000; path=/; domain=.icandeliver.ru; secure Server: nginx Date: Mon, 19 Jun 2017 05:42:58 GMT Transfer-Encoding: chunked Content-Security-Policy-Report-Only: default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri /csp-report Set-Cookie: MdGBEgAfwfKoxKniLFKAUy7m=eyJpdiI6IkVUNzl6ZDMyODdKOVdLNnEwVkNTNkE9PSIsInZhbHVlIjoiNDlJYVwvcEthajNKRllrXC9aakFlVFwvQkg1QlpYRkdxVG9xOWtQcFVpMXNMc09JTTdOTnpRcWIrTFRTR2xhYnFIUkJSSkxPRWUzNDFZWTdGclBJQ1NGQ3c9PSIsIm1hYyI6ImI3MDkwMzAyMjYwNGI0MGEwN2Y4ODBlY2IyMDU1MzcwZTNlZDFmMjhkYTdkZGViNmVkZDEwYmU4YTdmODlkMjcifQ%3D%3D; expires=Sat, 18-Jun-2022 05:42:58 GMT; Max-Age=157680000; path=/; domain=.icandeliver.ru; secure; HttpOnly Access-Control-Allow-Origin: * expires: -1 HTTP/1.1 200 OK Connection: keep-alive Cache-Control: private, must-revalidate