Vary: Accept-Encoding Access-Control-Allow-Methods: GET, POST, OPTIONS X-Frame-Options: SAMEORIGIN Pragma: no-cache Content-Type: text/html; charset=utf-8 Connection: keep-alive HTTP/1.1 200 OK Set-Cookie: PHPSESSID=bc1290d8509ae4bc84b1a3fa587e19c5; path=/; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Server: nginx Cache-Control: public Strict-Transport-Security: max-age=31536000; includeSubdomains Set-Cookie: PHPSESSID=a2e3eec5b06fcdfdb7a6b6a97516eb75; path=/; HttpOnly Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Access-Control-Allow-Origin: * Date: Sat, 01 Jul 2017 07:00:41 GMT Transfer-Encoding: chunked Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0