Ignore spaces in Access-Control-Request-Headers
Parsing of allowed headers must be case insensitive