fix(http): preserve CORS tracing allow headers

fix(http): preserve CORS tracing allow headers #20473