Add Exposed Headers to CORS
Merge pull request #738 from MathieuLoutre/master

Support for Access-Control-Expose-Headers in the CORS options