Cache-Control: max-age=2520, private, must-revalidate Content-Length: 7667 Access-Control-Allow-Headers: Accept,Accept-Charset,Accept-Encoding,Accept-Language,Access-Control-Request-Method,Access-Control-Request-Headers,Access-Control-Allow-Credentials,Access-Control-Allow-Origin,Authorization,Content-Length,Content-Type,Cookie,Host,Key,Origin,Referer,User-Agent,X-CustomHeader,X-CSRF-Token,X-Requested-With Access-Control-Allow-Origin: P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Expires: Sun, 16 Apr 2017 21:22:14 GMT HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Accept-Ranges: none Date: Sun, 16 Apr 2017 22:22:14 GMT Access-Control-Max-Age: 86400 Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS,HEAD,TRACE Pragma: no-cache Connection: keep-alive Content-Type: text/html; charset=UTF-8 Timing-Allow-Origin: * Server: Apache/2.4.25 (Debian) Set-Cookie: SUPRSessionId=cde34n1sue8cjoq5obq4qmmrp1; expires=Sun, 16-Apr-2017 23:58:14 GMT; Max-Age=5760; path=/; domain=supr.com Vary: Accept-Encoding,User-Agent