Enhance request correlation filter.

* Set header earlier so it works even in chunked responses.
* Ensure that tracing header is only accepted from local networks.
* Drop timeTaken as Jetty tracks that.