X-Frame-Options: SAMEORIGIN Access-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,OPTIONS X-Request-Id: 297504a9-f2d7-4eef-9bf7-5d6714e4eae9 Connection: keep-alive Access-Control-Allow-Headers: Access-Control-Request-Headers,Access-Control-Request-Method,Accept,Accept-Encoding,Accept-Language,Content-Length,Cookie,Host,Origin,Referer,User-Agent,Content-Type,X-Requested-With,X-CSRF-Token,If-Modified-Since,If-None-Match X-Content-Type-Options: nosniff Set-Cookie: _launch_ly_session=d0f26578f8cab5878aea6c545bedb48a; path=/; HttpOnly Vary: Accept-Encoding X-XSS-Protection: 1; mode=block HTTP/1.1 200 OK Access-Control-Allow-Origin: ETag: "d754d0a36e6edb8eaf3d5ad1de9a6192" Vary: Accept-Encoding X-Runtime: 0.053810 Status: 200 OK Access-Control-Expose-Headers: ETag Server: nginx Content-Type: text/html; charset=utf-8 Access-Control-Allow-Credentials: true Date: Mon, 07 Aug 2017 06:05:18 GMT Access-Control-Request-Method: * Cache-Control: max-age=0, private, must-revalidate X-Rack-Cache: miss Content-Length: 27805