Access-Control-Allow-Origin: * HTTP/1.1 200 OK Date: Wed, 25 Oct 2017 11:20:18 GMT Connection: close Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Set-Cookie: CRAFT_CSRF_TOKEN=0b2bbb0b9c1930fdf998e0fe2497eaff8a84d6cas%3A40%3A%22Ng7jctZAzfOAqpml_vza0w_4byLwZZWq37rzj87y%22%3B; path=/; secure; HttpOnly Pragma: no-cache Access-Control-Allow-Credentials: true Cache-Control: no-store, no-cache, must-revalidate charset: utf-8 Alt-Svc: quic=":443"; ma=2592000; v="35,37,38,39" Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: k4cms=0rtj9e5gqu1o77qk1v638muat3; path=/; secure; HttpOnly Access-Control-Allow-Headers: origin, x-requested-with, content-type Accept-Ranges: bytes Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked