HTTP/1.1 200 OK Vary: Accept-Encoding Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Set-Cookie: PHPSESSID=6opo02j2sppqtkk59gk8sd7lp5; path=/; secure; HttpOnly Last-Modified: Sat, 10 Jun 2017 10:39:57 GMT Set-Cookie: BE_USER_AUTH=cec9de0f99d6977bab3dec1b504836f316951ebe; expires=Fri, 09-Jun-2017 10:39:56 GMT; Max-Age=-86400; path=/; secure; httponly X-Frame-Options: SAMEORIGIN Vary: User-Agent,Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Pragma: no-cache Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Expires: Fri, 06 Jun 1975 15:10:00 GMT Access-Control-Allow-Origins: * Set-Cookie: FE_USER_AUTH=7ed7b4eb21b48928adf03dc75034186057450337; expires=Fri, 09-Jun-2017 10:39:56 GMT; Max-Age=-86400; path=/; secure; httponly Access-Control-Allow-Origin: https://www.futuresax.org Access-Control-Max-Age: 1000 Content-Type: text/html; charset=utf-8 Set-Cookie: BE_USER_AUTH=cec9de0f99d6977bab3dec1b504836f316951ebe; expires=Fri, 09-Jun-2017 10:39:56 GMT; Max-Age=-86400; path=/; secure; httponly Connection: keep-alive Transfer-Encoding: chunked Server: nginx X-XSS-Protection: 1; mode=block Date: Sat, 10 Jun 2017 10:40:12 GMT Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT X-Content-Type-Options: nosniff