<html>
<div id="demo">
</div>
</html>
<script>
var xhr = new XMLHttpRequest();
xhr.open("GET", "https://ibt-proxy.carmamail.com/live2/rest/2377/lists", false);
xhr.withCredentials = true;
xhr.setRequestHeader('X-Carma-Authentication-Token', '771744ff1aaa29a12324e9c5c8366fe91e736c3d132b8c6c0ab7a8c309baeb9465107ecda9b75bb30fa2ef54230ed84af3bb3772e3fed7cb32ac6e6a743cc8fa')
xhr.send();
console.log(xhr.response);
var obj = JSON.parse(xhr.response);
Object.keys(obj).forEach(function(i) {
document.getElementById("demo").innerHTML += obj[i].id + "<br/>" + obj[i].name + "<br/><br/>";
});
</script>