X-Frame-Options: SAMEORIGIN Access-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,OPTIONS X-Request-Id: dfb0896e-b1a7-4fc9-808e-3ebc4a4eea13 Connection: keep-alive Access-Control-Allow-Headers: Access-Control-Request-Headers,Access-Control-Request-Method,Accept,Accept-Encoding,Accept-Language,Content-Length,Cookie,Host,Origin,Referer,User-Agent,Content-Type,X-Requested-With,X-CSRF-Token,If-Modified-Since,If-None-Match X-Content-Type-Options: nosniff Set-Cookie: _launch_ly_session=47d8fdbe99b1786e3d33d5e4420ad4e6; path=/; HttpOnly Vary: Accept-Encoding X-XSS-Protection: 1; mode=block HTTP/1.1 200 OK Access-Control-Allow-Origin: ETag: "d5d69cdc2e45be6496b49c90e2494260" Vary: Accept-Encoding X-Runtime: 0.083710 Status: 200 OK Access-Control-Expose-Headers: ETag Server: nginx Content-Type: text/html; charset=utf-8 Access-Control-Allow-Credentials: true Date: Sun, 12 Nov 2017 17:18:10 GMT Access-Control-Request-Method: * Cache-Control: max-age=0, private, must-revalidate X-Rack-Cache: miss Content-Length: 181733