Fix do_input_validation call-time pass by reference

Call-time pass-by-reference has been removed in PHP 5.4 [1]. There is also an existing todo entry in redmine [2].

[1] http://php.net/manual/en/language.references.pass.php
[2] http://redmine.pfsense.org/issues/2565