CORS doesn't work in sam for simple requests when using AWS::Serverless::HttpApi

### Description:
CORS doesn't work in `sam` for [simple requests](https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#simple_requests) when using `AWS::Serverless::HttpApi`. It does work on preflighted requests, and it also works on "real" AWS.

### Steps to reproduce:
```yaml
AWSTemplateFormatVersion: "2010-09-09"
Transform: AWS::Serverless-2016-10-31
Globals:
HttpApi:
CorsConfiguration:
AllowOrigins:
- https://localhost:8001
AllowHeaders:
- Content-Type
AllowMethods:
- "*"
Resources:
APIGateway:
Type: AWS::Serverless::HttpApi
Properties:
StageName: local
GetTestFunction:
Type: AWS::Serverless::Function
Properties:
Handler: dist/GetTestFunction/index.handler
Runtime: nodejs14.x
Timeout: 10
Events:
GetEvent:
Type: HttpApi
Properties:
Path: /test
Method: GET
```

(I couldn't get this to work at all if I put the `CorsConfiguration` in the `AWS::Serverless::HttpApi` element instead of in `Globals`, despite [your configurator](https://cors.serverlessland.com/) saying it should work in either place. That's an issue for another ticket.)

```typescript
import { APIGatewayProxyEventV2 } from "aws-lambda";

export async function handler(_event: APIGatewayProxyEventV2) {
const response = {
statusCode: 200,
body: `Hello from Lambda`,
};

return response;
}
```

We are running this with `npm run start:dev` where:

```json
"start:dev": "npm run clean && webpack -w --config webpack.dev.js & sam local start-api --profile xxxxxxx --warm-containers LAZY",
```

### Observed result:

```bash
$ curl -i -H "Origin: https://localhost:8001" http://localhost:3000/test
HTTP/1.0 200 OK
Content-Type: application/json
Content-Length: 17
Server: Werkzeug/1.0.1 Python/3.8.13
Date: Thu, 31 Mar 2022 19:09:58 GMT

Hello from Lambda⏎
```
(Note no `Access-Control-Allow-Origin` header.)

### Expected result:

Here it is running on "real" AWS (we deploy with terraform, not `sam`, so I believe this is close to what SAM might deploy, but essentially I've just configured CORS on the API Gateway)

```bash
$ curl -i -H "Origin: https://localhost:8001" https://xxxxxxxx.execute-api.us-west-2.amazonaws.com/sandbox/test
HTTP/2 200
date: Thu, 31 Mar 2022 19:11:21 GMT
content-type: text/plain; charset=utf-8
content-length: 17
access-control-allow-origin: https://localhost:8001
apigw-requestid: P3Rx-hT9vHcEPQg=

Hello from Lambda⏎
```
(Note `Access-Control-Allow-Origin` header is present.)

A preflight request against `sam` also works:

```bash
$ curl -i -X OPTIONS -H "Origin: https://localhost:8001" http://localhost:3000/test
HTTP/1.0 200 OK
Access-Control-Allow-Origin: https://localhost:8001
Access-Control-Allow-Methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
Access-Control-Allow-Headers: Content-Type
Content-Length: 0
Server: Werkzeug/1.0.1 Python/3.8.13
Date: Thu, 31 Mar 2022 19:23:02 GMT
```

### Additional environment details (Ex: Windows, Mac, Amazon Linux etc)

1. OS: macOS 12.3
2. If using SAM CLI, `sam --version`: `SAM CLI, version 1.43.0`
3. AWS region: Mostly local for this report, but `us-west-2` is working correctly