| Server | nginx/1.8.0 |
| Content-Type | text/html; charset=utf-8 |
| Content-Length | 4832 |
| Connection | keep-alive |
| X-Powered-By | Express |
| Access-Control-Allow-Origin | * |
| Access-Control-Allow-Headers | Origin, X-Requested-With, Content-Type, Accept |
| Access-Control-Allow-Credentials | true |
| Vary | Origin |
| ETag | W/"blmPBqdhrH+cz5/AProZKA==" |
| set-cookie | connect.sid=s%3A-nvOcp9E48cJJx182t4__Cg5QcFgnCgO.HP6msqeVATx1NOHcD01L2cgfr%2FKFEOsbBrumH6FXAXY; Path=/; HttpOnly |
| Strict-Transport-Security | max-age=63072000 |
| X-Frame-Options | Sameorigin, SAMEORIGIN |
| X-Content-Type-Options | nosniff |