Adding access control expose headers to registration responses