"Fix" allowAccess.

HttpServerletRequest.getHeader(s) is case sensitive in the request
mock. The mock simply uses the hashtable you provide to look up
headers. In reality, HttpServletRequest is case insensitive.  We can
fix the mock later, but for now we make sure the header names match.