GET /api/something/1 HTTP/1.1
Host: 127.0.0.1:8380
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
Origin: http://127.0.0.1:8080
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Accept: application/json, text/plain, */*
withCredentials: true
SuppressBrowserLogin: true
crossDomain: true
Referer: http://127.0.0.1:8080/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: en-US,en;q=0.8,eu;q=0.6

HTTP/1.1 401 Unauthorized
Server: Apache-Coyote/1.1
Pragma: No-cache
Cache-Control: no-cache
Expires: Thu, 01 Jan 1970 10:00:00 AEST
WWW-Authenticate: X-Basic realm="Foo Bar"
Access-Control-Allow-Origin: http://127.0.0.1:8080
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: crossDomain, withCredentials, Authorization, Content-Type, Access-Control-Request-Headers, Set-Cookie, Cookie, Origin, SuppressBrowserLogin
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Thu, 26 May 2016 00:04:07 GMT