Fix confusion between Access-Control-Allow-Headers and Access-Control-Ex...

...pose-Headers