| Access-Control-Allow-Origin | * |
| Access-Control-Allow-Headers | Origin, Content-Type, X-Access-Token |
| X-DNS-Prefetch-Control | off |
| X-Frame-Options | SAMEORIGIN |
| Strict-Transport-Security | max-age=15552000; includeSubDomains |
| X-Download-Options | noopen |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 1; mode=block |
| Expires | Wed, 10 May 2017 20:18:22 GMT |
| Accept-Ranges | bytes |
| Cache-Control | public, max-age=31536 |
| Last-Modified | Fri, 05 May 2017 01:07:37 GMT |
| Content-Type | text/html; charset=UTF-8 |
| set-cookie | connect.sid=s%3AfcpXh2-G2LPxhbg4uXifbFS_okvcBFy7.0lbVCLFrIKOJzzPUFFK5VptyjwGEkzwF7zn8rFBS9SE; Path=/; Expires=Wed, 10 May 2017 12:32:46 GMT; HttpOnly |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |
| Connection | keep-alive |
| Transfer-Encoding | chunked |