Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS,HEAD,TRACE Date: Fri, 10 Nov 2017 16:14:08 GMT Vary: Accept-Encoding,User-Agent Connection: keep-alive Set-Cookie: SUPRSessionId=sd1fb68c37298s4ucreool66v3; expires=Fri, 10-Nov-2017 17:50:08 GMT; Max-Age=5760; path=/; domain=supr.com; secure Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Set-Cookie: supr_com_cartId=MTY0ODQyNjExOQ%3D%3D; expires=Fri, 17-Nov-2017 16:14:08 GMT; Max-Age=604800; path=/ Link: <http://shop.mehr-depression.de/wp-json/>; rel="https://api.w.org/" Access-Control-Allow-Origin: Cache-Control: max-age=2520, private, must-revalidate HTTP/1.1 200 OK Access-Control-Allow-Headers: Accept,Accept-Charset,Accept-Encoding,Accept-Language,Access-Control-Request-Method,Access-Control-Request-Headers,Access-Control-Allow-Credentials,Access-Control-Allow-Origin,Authorization,Content-Length,Content-Type,Cookie,Host,Key,Origin,Referer,User-Agent,X-CustomHeader,X-CSRF-Token,X-Requested-With Transfer-Encoding: chunked P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Content-Type: text/html; charset=UTF-8 Accept-Ranges: none Timing-Allow-Origin: * Expires: Fri, 10 Nov 2017 16:56:08 GMT Server: Apache/2.4.25 (Debian)