[cors] Adding Access-Control-Expose-Headers.
Testing multiple expose headers.
Merge pull request #123 from rakyll/cors

[cors] Add support for Access-Control-Expose-Headers