Gotorderly.com summary

Content-Type: text/html X-Frame-Options: DENY X-Content-Type-Options: nosniff Access-Control-Expose-Headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Access-Control-Allow-Credentials, Access-Control-Allow-Headers, Access-Control-Allow-Methods, Access-Control-Allow-Origin, Access-Control-Expose-Headers, Access-Control-Max-Age, Access-Control-Request-Headers, Access-Control-Request-Method, Cache-Control, Connection, Content-Encoding, Content-Length, Content-Type, Cookie, DNT, Date, Expires, HTTP_CLIENT_IP, HTTP_COMING_FROM, HTTP_VIA, Host, If-Modified-Since, Keep-Alive, Location, Origin, Pragma, REMOTE_ADDR, Referer, Server, Set-Cookie, Srv, Transfer-Encoding, User-Agent, Vary, X-Content-Type-Options, X-CustomHeader, X-DNS-Prefetch-Control, X-Forwarded-For, X-Forwarded-Host, X-Forwarded-Server, X-Frame-Options, X-Modified, X-OTHER, X-Originating-IP, X-Output, X-PING, X-PINGOTHER, X-Powered-By, X-Real-IP, X-Redirect, X-Requested-With, X-Robots-Tag, X-XSS-Protection, X-Xss-Protection, X-Auth-Token, X-Orderly-Ajax-Login Access-Control-Allow-Credentials: true Content-Length: 4960 Last-Modified: Wed, 21 Jun 2017 00:02:22 GMT Strict-Transport-Security: max-age=31536000 ; includeSubDomains Access-Control-Allow-Headers: X-PINGOTHER, Origin, X-Requested-With, Content-Type, Accept, X-Auth-Token, X-Current-Restaurant, X-Orderly-Ajax-Login HTTP/1.1 200 Vary: Accept-Encoding ETag: W/"4960-1498003342000" Cache-Control: max-age=0 Connection: keep-alive X-XSS-Protection: 1; mode=block Pragma: no-cache Access-Control-Max-Age: 3600 Date: Wed, 21 Jun 2017 17:07:38 GMT Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE, HEAD Accept-Ranges: bytes Expires: Tue, 20 Jun 2017 17:07:38 Z