Specified rails version, to make the tests less brittle
Access-Control-Expose-Headers should be in regular responses, instead of preflight response