ow-origin: *
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-credentials: true
X-Firefox-Spdy: h2