Access-Control-Allow-Credentials: true Access-Control-Allow-Method: OPTIONS Access-Control-Allow-Origin: https://developers.facebook.com Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length Cache-Control: private, no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 05 Oct 2017 16:51:08 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache Public-Key-Pins-Report-Only: max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/" Status: 200 Strict-Transport-Security: max-age=15552000; preload Vary: Origin Accept-Encoding X-Content-Type-Options: nosniff X-Fb-Debug: cm9oxv7GUWisJzhqB1tRg7ktN6rbcpEeW5DBQGovg+nzCs1UgK/4ZGnjwpnXtIDlDA2ZwOfOYd79Az7PoWDFAw== X-Frame-Options: DENY X-Xss-Protection: 0