ol-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: no-cache, max-age=0
vary: Origin
X-Firefox-Spdy: h2