Add a middleware to sanitize response splitting attempts.

Thanks to Jordan Milne (/u/largenocream) for reporting this and
joyent/node@3c293ba27250f1885efa8d8db8e75d3ea033c206 for inspiration for
this solution.