Add Access-Control-Expose-Headers header
Add CHANGELOG entry for #3
Finish #3 Whitelist rate-limiting headers in CORS
Update version number to 1.2.3
Finish 1.2.3