Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE X-Powered-By: PHP/5.4.45 expires: -1 Date: Mon, 11 Dec 2017 17:04:31 GMT Cache-Control: private, must-revalidate Access-Control-Allow-Origin: Content-Type: text/html; charset=UTF-8 Server: nginx HTTP/1.1 200 OK pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Credentials: true X-Cache: HIT from Backend Transfer-Encoding: chunked Connection: keep-alive