Access-Control-Allow-Methods: GET, POST, PUT, DELETE Content-Type: text/html; charset=UTF-8 Cache-Control: public, max-age=0 Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN HTTP/1.1 200 OK X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Access-Control-Allow-Headers: Content-Type, auth X-Content-Type-Options: nosniff Accept-Ranges: bytes Last-Modified: Sat, 20 Jan 2018 15:40:34 GMT Connection: keep-alive Server: nginx/1.12.1 (Ubuntu) ETag: W/"59b-161143a8255" X-Download-Options: noopen Strict-Transport-Security: max-age=63072000; includeSubdomains X-DNS-Prefetch-Control: off Content-Length: 1435 Date: Thu, 15 Feb 2018 18:09:29 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff