Adding ES-ExpectedVersion for allowed headers

once again :) CORS