Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Origin, Content-Type, Spotify-App-Version, App-Platform Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Origin: * Access-Control-Max-Age: 604800 Connection: keep-alive Content-Length: 0 Date: Thu, 05 Oct 2017 09:28:45 GMT Keep-Alive: timeout=600 Server: nginx