Fix #408: goliath passes request header keys as symbols