exposed EXPOSE_HEADERS in cors.js to enable custom header in response re...

I needed to add custom headers that are readable in the respons part of a request. Similar as adding allow  headers by pushing  values into ALLOW_HEADERS, I propose the same for EXPOSE_HEADERS.

Hence, I exposed the stack in the cors object.