add keep-alive headers to connect response

I think the problem is there's no SSL handshake – the original CONNECT request is getting slung over to the SSL proxy. LittleProxy is doing effectively this but with an earlier version of Netty so it's quite hard to figure out what's going on.