X-Content-Type-Options: nosniff Date: Mon, 27 Nov 2017 19:51:17 GMT Cache-Control: max-age=0, must-revalidate, no-cache, no-store X-UA-Compatible: IE=edge Access-Control-Allow-Credentials: true X-Frame-Options: SAMEORIGIN Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, apikey Strict-Transport-Security: max-age=31536000 Pragma: no-cache HTTP/1.1 200 OK X-XSS-Protection: 1; mode=block Transfer-Encoding: chunked Access-Control-Allow-Origin: http://localhost:8080 Content-Type: text/html; charset=UTF-8 Expires: Sun, 27 Nov 2016 19:51:18 GMT Vary: Accept-Encoding Set-Cookie: mage-messages=%5B%5D; expires=Tue, 27-Nov-2018 19:51:18 GMT; Max-Age=31536000; path=/ Server: Apache/2.4.18 (Ubuntu)