Do not drop headers that contain underscores.

There are some common headers that use underscores, like `HTTP_X_CSRF_TOKEN` to prevent CSRF attacks.

Nginx drops these headers by default. This pull request enables the option to pass headers that include underscores.

/cc @wfarr