low-origin: https://us2.concursolutions.com access-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS access-control-allow-headers: accept,accept-language,access-control-allow-origin,authorization,cache-control,content-type,dnt,if-match,if-modified-since,link,keep-alive,origin,user-agent,x-mx-reqtoken,x-requested-with,concur-correlationid,concur-debug,x-csrf-token,appid,userid,x-token,newrelic,traceparent,tracestate,concur-environment access-control-expose-headers: content-length,concur-correlationid,concur-debug,etag access-control-allow-credentials: true vary: Origin concur-correlationid: 2c3119deb47c1e76d9c9936c19bae831 sap-server: 33 date: Wed, 04 Mar 2026 10:51:56 GMT x-content-type-options: nosniff X-Firefox-Spdy: h2