Vary: Accept-Encoding X-Response-Time: 94ms X-XSS-Protection: 1 access-control-allow-origin: * Content-Type: text/html; charset=utf-8 Connection: keep-alive HTTP/1.1 200 OK server-group: prd access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, ajax, access-key,backend,app_request,frontend, token,device Server: nginx mode: block X-Frame-Options: DENY Cache-Control: no-cache, private, no-store, must-revalidate, max-stale=0, post-check=0, pre-check=0 ETag: "453695216" Set-Cookie: jsessionid=s%3AUgPjmwuIcYNyb5oJAlkINOs3.wEhc2TMkDUeWbcF8N0YE0kZSx%2Bx9ts7sHb47Ph4XPmA; Path=/; Expires=Fri, 19 May 2017 07:58:33 GMT; HttpOnly X-Content-Type-Options: nosniff Date: Fri, 12 May 2017 07:58:33 GMT Content-Length: 9139 access-control-allow-methods: POST,HEAD,GET,PUT,DELETE,OPTIONS