HttpEPServer: Add Access-Control-Allow-Headers

This header is required for chrome to work

Change-Id: Idad73962562941d88c931ae717be0fbd5b1c47c1