CSRF expire headers

Request URL: http://callnet-dev-api.synergetica.net/api/settings/monitor?org_id=1801439851237913898
Request Method: GET
Status Code: 403 Forbidden
Remote Address: 46.28.193.118:80

Request Headers
Accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Encoding:gzip, deflate, sdch
Accept-Language:ru-RU,ru;q=0.8,en-US;q=0.6,en;q=0.4,bg;q=0.2,de;q=0.2,fil;q=0.2,uk;q=0.2,zh-CN;q=0.2
Connection:keep-alive
Cookie:PHPSESSID=ur4n44gl3fv53gfq4ovdr40053; csrf=7e6205439b7629cea198bea630a756cd
Host:callnet-dev-api.synergetica.net
Upgrade-Insecure-Requests:1
User-Agent:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36

Response Headers
Cache-Control:no-cache
Connection:Keep-Alive
Content-Encoding:gzip
Content-Type:application/json
Date:Mon, 09 May 2016 06:23:11 GMT
Expires:Thu, 19 Nov 1981 08:52:00 GMT
Keep-Alive:timeout=15, max=98
Pragma:no-cache
Server:nginx/1.4.6 (Ubuntu)
Set-Cookie:csrf=9c42f3d574873f56d5151fefdc91ced9; expires=Tue, 09-May-2017 06:23:11 GMT; Max-Age=31536000; path=/; httponly
Transfer-Encoding:chunked
Vary:Accept-Encoding
X-Powered-By:PHP/5.5.9-1ubuntu4.14