Added {WSF_RESPONSE}.extend_header

This is useful when we want to fill the `header`
in multi-pass (i.e. in different classes).
We first call `extend_header`, and
finally we call `put_header_text`.

{WSF_RESPONSE}.extend_header is useful for an upcoming PR
regarding CORS (smaller patches are better...)