tokens updated

src/main/java/com/passionproject/project_spitball20/JWT/WebSecurity.java

     CorsConfigurationSource corsConfigurationSource() {
         final UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
         CorsConfiguration cors = new CorsConfiguration().applyPermitDefaultValues();
-        cors.addAllowedHeader("Authorization");
+        cors.addExposedHeader("Authorization");
 
         source.registerCorsConfiguration("/**", cors);
         return source;