Allow to set Access-Control-Expose-Headers in Cors filter