Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: private Content-Length: 40 Content-Type: text/html; charset=utf-8 Date: Thu, 05 Oct 2017 11:32:08 GMT Server: Microsoft-IIS/7.5 Set-Cookie: ASP.NET_SessionId=crawp2fz2ugqiaz3qqkujvsh; path=/; HttpOnly Strict-Transport-Security: max-age=31536000 X-Aspnet-Version: 4.0.30319 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET X-Xss-Protection: 1; mode=block