X-Frame-Options: SAMEORIGIN Access-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,OPTIONS X-Request-Id: 262f4772-42b1-4101-b1fd-36bbde42eb3a Connection: keep-alive Access-Control-Allow-Headers: Access-Control-Request-Headers,Access-Control-Request-Method,Accept,Accept-Encoding,Accept-Language,Content-Length,Cookie,Host,Origin,Referer,User-Agent,Content-Type,X-Requested-With,X-CSRF-Token,If-Modified-Since,If-None-Match X-Content-Type-Options: nosniff Set-Cookie: _launch_ly_session=5d3f30342c50ef086a75c6e83d2810be; path=/; HttpOnly Vary: Accept-Encoding X-XSS-Protection: 1; mode=block HTTP/1.1 200 OK Access-Control-Allow-Origin: ETag: "050e32f75774d9cd33b3397aa53f7c3a" Vary: Accept-Encoding X-Runtime: 0.095757 Status: 200 OK Access-Control-Expose-Headers: ETag Server: nginx Content-Type: text/html; charset=utf-8 Access-Control-Allow-Credentials: true Date: Thu, 09 Nov 2017 10:28:36 GMT Access-Control-Request-Method: * Cache-Control: max-age=0, private, must-revalidate X-Rack-Cache: miss Content-Length: 45545