Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Origin, Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Origin: * Access-Control-Max-Age: 604800 Connection: keep-alive Content-Length: 0 Date: Thu, 05 Oct 2017 09:13:26 GMT Keep-Alive: timeout=600 Server: nginx