Fix bug with Access-Control-Accept-Headers

Access-Control-Accept-Headers does not support wildcards.  In order to
get the desired effect, I have updated Access-Control-Accept-Headers to
echo the value of the Access-Control-Reqest-Headers header.