expose timestamp header to clients that use CORS
Merge pull request #431 from zaach/expose-timestamp

expose timestamp header to clients that use CORS