Backporting http response splitting protection

This is taken from https://github.com/joyent/node/pull/4292 which was applied to master.  

Since this helps mitigate response splitting threats it should be applied to v0.8.