prevent email header injection in add_header()