Fix request-headers parsing
Better preflight vs request handling
Correct expose-headers output