Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Origin, Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Origin: * Access-Control-Max-Age: 604800 Connection: keep-alive Content-Length: 74 Content-Type: application/json Date: Thu, 05 Oct 2017 08:58:47 GMT Keep-Alive: timeout=600 Server: nginx Www-Authenticate: Bearer realm="spotify"