Typo fix in timeout middleware [req->res]

Discovered this apparent typo while testing the timeout middleware. As far as I can tell "headerSent" is never defined on the ServerRequest object, instead it's on ServerResponse.