Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET,PUT,POST,DELETE X-Content-Type-Options: nosniff ETag: W/"1b12-qyCssG3d1epN/mP/57cSyA" Date: Sun, 29 Oct 2017 04:38:54 GMT X-Download-Options: noopen Access-Control-Allow-Credentials: true Content-Type: text/html; charset=utf-8 Server: nginx/1.2.1 HTTP/1.1 200 OK Strict-Transport-Security: max-age=15778476; includeSubDomains Access-Control-Allow-Origin: * X-XSS-Protection: 1; mode=block Vary: Accept-Encoding Content-Length: 6930 Connection: keep-alive