Add Expose Headers for API Token Transfer