protect against mal-formed HTTP_ACCEPT_LANGUAGE strings