Strip invalid UTF8 $_SERVER values

This introduces a mbstring library requirement.