mod_wsgi: fix CVE-2014-0240, CVE-2014-8583