Access-Control-Allow-Methods: GET, POST, OPTIONS Vary: Accept-Encoding Vary: Accept-Encoding Set-Cookie: ua=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Content-Type: text/html; charset=utf-8 Set-Cookie: SESSION=17enfp2lu4gtllo18cflq1gu34; path=/; secure; HttpOnly Cache-Control: no-store, no-cache, must-revalidate Server: nginx Date: Fri, 26 May 2017 09:14:41 GMT Content-Length: 1411 Access-Control-Allow-Origin: * Pragma: no-cache Access-Control-Allow-Credentials: true Expires: Thu, 19 Nov 1981 08:52:00 GMT HTTP/1.1 200 OK Connection: keep-alive X-Frame-Options: SAMEORIGIN