Add Access-Control-Expose-Headers: X-Bonita-API-Token

In order to be able to access to X-Bonita-API-Token header and get the token in javascript, we need to expose it.