Actually there are three problems with this:
* URL-encoded query parameters are not unescaped prior to the mod_rewrite match
* the content-type is not set
* CORS headers are missing

Here's my version:
This passes all of the checks on http://webfinger.net/