Access-Control-Allow-Origin: * Set-Cookie: _csrf=5f1e28d8103f3641f0fb6b76cb47be4d42f6a04c34c5f63c4a34fe27461f7623a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22UkDQc8gYNFaBu7xRKGGwzWrVCfXst9g7%22%3B%7D; path=/; HttpOnly Access-Control-Max-Age: 1000 Transfer-Encoding: chunked Server: Apache Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Set-Cookie: PHPSESSID=3b5lj6tcttbnphkttmuq612or1; path=/; HttpOnly X-Powered-By: PHP/7.0.27 Date: Mon, 26 Feb 2018 15:30:40 GMT HTTP/1.1 200 OK Vary: Accept-Encoding Pragma: no-cache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate