Update ngx_http_modsecurity.c

allow multiple header values to be set from client.
ex. Set-Cookie header should be allowed to be sent multiple values.