Added Access-Control-Expose-Headers: Location

*Why I did it?*
Unable to read Location response header in java script due to
"Refused to get unsafe header".

*How I did it?*
Added Access-Control-Expose-Headers with value Location is Location
header is set.
Merge pull request #4 from msuchecki/topic/header

Added Access-Control-Expose-Headers: Location