Add support for exposed response headers.

By default, only 'simple response headers' are exposed for cross domain requests. This pull request allows you to set extra headers that can be exposed to the response.

More info here: https://developer.mozilla.org/en-US/docs/HTTP/Access_control_CORS#Access-Control-Expose-Headers