Including the `Range` header on S3 requests triggers a `502 Bad Gateway` when localstack is run with SSL.

Sample test that demonstrates the issue:
```python
import logging
import io
import os

import boto3

logging.basicConfig(level=logging.INFO)


def test_range_s3():
    s3 = boto3.client('s3', endpoint_url='https://localhost:4572', use_ssl=True, verify=False)

    bucket = 'localstack-s3-range'
    obj_name = 'sample.bin'
    s3.create_bucket(Bucket=bucket)

    chunk_size = 1024

    with io.BytesIO() as data:
        data.write(os.urandom(chunk_size * 2))
        logging.info('Uploading object (size=%d)', data.getbuffer().nbytes)
        data.seek(0)
        s3.upload_fileobj(data, bucket, obj_name)

    range_header = f'bytes=0-{chunk_size - 1}'
    logging.info('Downloading using Range header: %s', range_header)
    
    # this will raise an exception
    # botocore.exceptions.ClientError: An error occurred (502) when calling the GetObject operation (reached max retries: 4): Bad Gateway
    resp = s3.get_object(Bucket=bucket, Key=obj_name, Range=range_header)
    
    content = resp['Body'].read()
    assert len(content) == chunk_size
```

This is a fairly recent regression:

Running against `localstack/localstack:latest` will fail using SSL but pass without SSL. 
Running against `localstack/localstack:0.10.6` will pass using SSL as well as without SSL.

I am guessing changes from either #1887 or #1906 broke this since those were related to `Range` functionality, but have not bisected to be sure.
if 'text/html' in response.headers.get('Content-Type', '') \
                        and not response_content_str.lower().startswith('<!doctype html'):
                    response.headers['Content-Type'] = 'application/xml; charset=utf-8'
                reset_content_length = True
            
            if method == 'DELETE':
                reset_content_length = True
            if reset_content_length:
                response.headers['content-length'] = len(response._content)
    def _update_location(self, content, bucket_name):
        bucket_name = normalize_bucket_name(bucket_name)
        host = config.HOSTNAME_EXTERNAL
        if ':' not in host:
            host = '%s:%s' % (host, config.PORT_S3)
        return re.sub(r'<Location>\s*([a-zA-Z0-9\-]+)://[^/]+/([^<]+)\s*</Location>',
            r'<Location>%s://%s/%s/\2</Location>' % (get_service_protocol(), host, bucket_name),
            content, flags=re.MULTILINE)
    @staticmethod
    def is_query_allowable(method, query):
        
        if not query:
            return True
        
        contains_cred = 'X-Amz-Credential' in query and 'X-Amz-Signature' in query
        contains_key = 'AWSAccessKeyId' in query and 'Signature' in query
        if (method == 'POST' and query.startswith('uploadId')) or contains_cred or contains_key:
            return True
UPDATE_S3 = ProxyListenerS3()