Expose the response headers

In order to access headers in a browser, we need to expose them as per
CORS protocol.

Fix the spec name