dialog: fixed adding contact header to REFER generated by dlg_bridge

- reported by Paul Smith

(cherry picked from commit ab7519006b6a53792d66b6903a4b0694083179b6)
(cherry picked from commit 97cab82e1217776b248a424b6d0ee6aaf9b092de)
(cherry picked from commit 8f178f070c99419714159c4c1154adbe0f9db17e)

modules/dialog/dlg_transfer.c

@@ -196,7 +196,7 @@ static int dlg_refer_callee(dlg_transfer_ctx_t *dtc)
 	memcpy(hdrs.s+23+dlg_bridge_controller.len+CRLF_LEN+dtc->to.len,
 			CRLF, CRLF_LEN);
 	memcpy(hdrs.s+23+dlg_bridge_controller.len+CRLF_LEN+dtc->to.len+CRLF_LEN,
-			dlg_bridge_controller.s, dlg_bridge_controller.len);
+			dlg_bridge_ref_hdrs.s, dlg_bridge_ref_hdrs.len);
 
 	memset(&uac_r, '\0', sizeof(uac_req_t));
 	set_uac_req(&uac_r, &met, &hdrs, NULL, dialog_info, TMCB_LOCAL_COMPLETED,