允許獲取response header中的屬性

httpServletResponse.setHeader("Access-Control-Expose-Headers", "status,token");