LockToken header should be from ResponseLock, not RequestLock

RFC2518 - required to send a Lock-Token header with the lock id as well
as in the body. Code was mistakanely sending RequestLock instead of
ResponseLock ids.