rol-allow-origin: * strict-transport-security: max-age=31536000 ; includeSubDomains ; preload X-Firefox-Spdy: h2