fix for #15. support Access-Control-Expose-Headers