LP#1002028: set Access-Control-Expose-Headers