[CXF-5598] Using case-insensitive comparison of allowed headers as per CORS spec