WEB-2074: headers should be lowercased
Merge pull request #12 from flyvictor/WEB-2074-secure-api

WEB-2074: headers should be lowercased