Response headers from api.contentful.com

Request through Incapsula

< Access-Control-Allow-Headers: Accept,Accept-Language,Authorization,Cache-Control,Content-Length,Content-Range,Content-Type,DNT,Destination,Expires,If-Match,If-Modified-Since,If-None-Match,Keep-Alive,Last-Modified,Origin,Pragma,Range,User-Agent,X-Http-Method-Override,X-Mx-ReqToken,X-Requested-With,X-Contentful-Version,X-Contentful-Content-Type,X-Contentful-Organization,X-Contentful-Skip-Transformation,X-Contentful-User-Agent
< Access-Control-Allow-Methods: DELETE,GET,HEAD,POST,PUT,OPTIONS
< Access-Control-Allow-Origin: *
< Access-Control-Expose-Headers: Etag
< Access-Control-Max-Age: 1728000
< CF-Space-Id: chesnog1a2cb
< Content-Type: application/vnd.contentful.management.v1+json
< Date: Tue, 20 Dec 2016 15:43:00 GMT
< ETag: "77f45f1497a407aeda6b806e5482e3da"
< Server: Contentful
< Strict-Transport-Security: max-age=15768000
< X-Content-Type-Options: nosniff
< X-Contentful-RateLimit-Hour-Limit: 18000
< X-Contentful-RateLimit-Hour-Remaining: 17997
< X-Contentful-RateLimit-Reset: 0
< X-Contentful-RateLimit-Second-Limit: 10
< X-Contentful-RateLimit-Second-Remaining: 9
< X-Contentful-Request-Id: c5dc8e6a06f31e35fd41924d7e2e9189
< Content-Length: 30252
< Connection: keep-alive
< Set-Cookie: visid_incap_673446=qxG0RefPQwqKOlAjklp+cH5RWVgAAAAAQUIPAAAAAAAhs/akGCmO1svOR1rJDpVW; expires=Wed, 20 Dec 2017 10:55:00 GMT; path=/; Domain=.contentful.com
< Set-Cookie: nlbi_673446=iMhvU5dxRhf3LXj66lKYhQAAAAA3HekrOxSVbo2cMlUwcmOY; path=/; Domain=.contentful.com
< Set-Cookie: incap_ses_259_673446=lf3hRY2sDmezYnGBlyeYA35RWVgAAAAAbEhSLNrAgupOKBFUhLWBWw==; path=/; Domain=.contentful.com
< Set-Cookie: ___utmvmFYuVKoi=kbfGiOKxjbW; path=/; Max-Age=900
< Set-Cookie: ___utmvaFYuVKoi=GPdUpzL; path=/; Max-Age=900
< Set-Cookie: ___utmvbFYuVKoi=uZy
<     XIMOCall: ctz; path=/; Max-Age=900
< X-Iinfo: 10-169862311-169862369 NNNN CT(101 101 0) RT(1482248574414 132) q(0 0 2 -1) r(4 4) U5
< X-CDN: Incapsula

Request to Origin

< Access-Control-Allow-Headers: Accept,Accept-Language,Authorization,Cache-Control,Content-Length,Content-Range,Content-Type,DNT,Destination,Expires,If-Match,If-Modified-Since,If-None-Match,Keep-Alive,Last-Modified,Origin,Pragma,Range,User-Agent,X-Http-Method-Override,X-Mx-ReqToken,X-Requested-With,X-Contentful-Version,X-Contentful-Content-Type,X-Contentful-Organization,X-Contentful-Skip-Transformation,X-Contentful-User-Agent
< Access-Control-Allow-Methods: DELETE,GET,HEAD,POST,PUT,OPTIONS
< Access-Control-Allow-Origin: *
< Access-Control-Expose-Headers: Etag
< Access-Control-Max-Age: 1728000
< CF-Space-Id: chesnog1a2cb
< Content-Type: application/vnd.contentful.management.v1+json
< Date: Tue, 20 Dec 2016 15:34:01 GMT
< ETag: "77f45f1497a407aeda6b806e5482e3da"
< Server: Contentful
< Strict-Transport-Security: max-age=15768000
< X-Content-Type-Options: nosniff
< X-Contentful-RateLimit-Hour-Limit: 18000
< X-Contentful-RateLimit-Hour-Remaining: 17998
< X-Contentful-RateLimit-Reset: 0
< X-Contentful-RateLimit-Second-Limit: 10
< X-Contentful-RateLimit-Second-Remaining: 9
< X-Contentful-Request-Id: b14d771e868fe2606ac3eeedf32104b0
< Content-Length: 30252
< Connection: keep-alive