wininet: Protect the request headers array with a critical section.