Move setting response based attributes in to start_response.

Fixes a lot of Hixie based issues.
Fix the Hixie handshake so the challenge response is sent after
`start_response`.