Access-Control-Allow-Origin: * X-Frame-Options: DENY Access-Control-Allow-Headers: X-SUBARU-MYPAGE-TOKEN, X-SUBARU-MYPAGE-VERSION Content-Type: application/json;charset=UTF-8 Date: Mon, 26 Jun 2017 23:24:05 GMT Access-Control-Allow-Credentials: false Strict-Transport-Security: max-age=31536000 ; includeSubDomains Server: Subaru Connection: close HTTP/1.1 403 Forbidden Access-Control-Max-Age: 3600 Pragma: no-cache Access-Control-Allow-Methods: POST, GET, PUT, DELETE Via: 1.1 vegur X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block