Allow Content-Range header to be accessed by clientside javascript

https://stackoverflow.com/questions/37897523/axios-get-access-to-response-header-fields

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#access-control-expose-headers