fix syntax error
add Access-Control-Expose-Headers directive