Port Facebook middleware from Katana.

Depends on https://github.com/aspnet/HttpAbstractions/pull/113
TODO: CoreCLR WinHttpHandler does not yet support custom server cert validation.
Those are for at test app that's limited to `http://localhost:12345/`. We do the same thing in Katana.