Fix Access-Control-Allow-Headers serialization in the case of iterables

A continuation of issue  https://github.com/wcdolphin/flask-cors/pull/9.
And a few small style fixes.