add support for Access-Control-Expose-Headers