Add Access-Control-Expose-Headers directive for correct CORS response to
POST requests.