A redirection in the HTTP protocol doesn't support adding any headers to the target location. It's basically just a header in itself and only allows for a URL.
When you adding your X-Header header with res.header you are sending that header back to the client.