B-56167 Add tests for responses from the origin service.

Additional tests for B-56167 "Whitelist headers where comma processing applies tests" story