Reject invalid UTF-8 in request path or querystring