ow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type cache-control: no-cache strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff expires: Sat, 07 Mar 2026 13:14:57 GMT cf-cache-status: DYNAMIC server: cloudflare X-Firefox-Spdy: h2