Content-Type: text/html;charset=UTF-8 Server: nginx X-Application-Context: application:prod:8080 Expires: 0 Content-Language: en X-XSS-Protection: 1; mode=block Connection: keep-alive Set-Cookie: JSESSIONID=A52794A855F4C886589340729D1FCB6D; Path=/; HttpOnly Transfer-Encoding: chunked Date: Sat, 03 Mar 2018 13:14:59 GMT Set-Cookie: CSRF-TOKEN=1e56acc2-06ec-4596-b41e-2923c60bd681; Path=/ Cache-Control: no-cache, no-store, max-age=0, must-revalidate HTTP/1.1 200 OK X-Content-Type-Options: nosniff Pragma: no-cache