Do case-insensitive matching and allow spaces in Access-Control-Request-Headers.

This PR does case-insensitive matching and trims spaces when checking headers in the preflight response.

I ran into issues when using this middleware with Angular because it the Access-Control-Request-Headers in the OPTIONS request it sends are lowercase and have spaces after the comma separating them. This resolves that issue. It should also fix the first issue in #3.