Added Access-Control-Expose-Headers: Location

*Why I did it?*
Unable to read Location response header in java script due to
"Refused to get unsafe header".

*How I did it?*
Added Access-Control-Expose-Headers with value Location is Location
header is set.