Double Access-Control-Allow-Origin

gistfile1.txt

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Origin: *
Set-Cookie: singly.id=REDACTED; domain=.singly.com; path=/; expires=Fri, 24 Feb 2012 23:15:45 GMT
x-powered-by: Express, Express
set-cookie: locker.project.id=REDACTED; path=/; expires=Sat, 11 Feb 2012 03:15:46 GMT; httpOnly
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
content-type: image/jpeg
content-length: 58752
last-modified: Tue, 02 Sep 2008 08:17:25 GMT
accept-ranges: bytes
date: Fri, 10 Feb 2012 23:15:46 GMT
connection: close
cache-control: max-age=1209600