handle 'upgrade' in comma-separated connection header

Firefox sends `keep-alive, upgrade`, not just `upgrade`, which was being turned into `close`.