| Vary | Origin |
| Access-Control-Allow-Credentials | true |
| X-DNS-Prefetch-Control | off |
| X-Frame-Options | SAMEORIGIN |
| Strict-Transport-Security | max-age=15552000; includeSubDomains |
| X-Download-Options | noopen |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 1; mode=block |
| Access-Control-Allow-Origin | {{production_domain_name}} |
| Access-Control-Allow-Headers | Origin, X-Requested-With, X-AUTHENTICATION, X-IP, Content-Type, Accept |
| Access-Control-Allow-Methods | GET, POST, PUT, DELETE, OPTIONS |
| Content-Type | text/html; charset=utf-8 |
| Content-Length | 16842 |
| ETag | W/"41ca-3YG9h20WT/HA1d/J8EuHcrVVLPI" |
| Connection | keep-alive |