handle empty CORS expose-headers header response
Merge pull request #1932 from kanongil/no-expose

handle empty CORS expose-headers header response