Fix cors (#67)

* Fix cors

* Exposed headers

---------

Co-authored-by: igba.ujege <igba.ujege@bjss.com>

Author: igba1980

proxies/live/apiproxy/policies/AssignMessage.AddCors.xml

@@ -5,8 +5,7 @@
         <Headers>
             <Header name="Access-Control-Allow-Origin">{request.header.origin}</Header>
             <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid</Header>
-            <!--you can add headers here if you want to expose
-            <Header name="Access-Control-Expose-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, x-my-new-header</Header> -->
+            <Header name="Access-Control-Expose-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, x-my-new-header</Header>
             <Header name="Access-Control-Max-Age">3628800</Header>
             <Header name="Access-Control-Allow-Methods">GET, PUT, POST, DELETE</Header>
         </Headers>

proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml

@@ -5,8 +5,7 @@
         <Headers>
             <Header name="Access-Control-Allow-Origin">{request.header.origin}</Header>
             <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid</Header>
-            <!--you can add headers here if you want to expose
-            <Header name="Access-Control-Expose-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, x-my-new-header</Header> -->
+            <Header name="Access-Control-Expose-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, x-my-new-header</Header>
             <Header name="Access-Control-Max-Age">3628800</Header>
             <Header name="Access-Control-Allow-Methods">GET, PUT, POST, DELETE</Header>
         </Headers>