HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://other.unrelated.origin.com
Cache-Control: no-cache, no-store, must-revalidate
Content-Length: 19
Content-Language: TestLanguage
Content-Type: application/json; charset=utf-8
Expires: Wed, 21 Oct 2199 07:28:00 GMT
Last-Modified: Wed, 07 Feb 2018 13:55:00 PST
Pragma: TestPragma
Set-Cookie: MySecretCookieKey=MySecretCookieValue
X-Content-Type-Options: nosniff
X-My-Secret-Header: secretValue