Report vuln for apache_mod_cgi_bash_env

Now with fewer false positives! It's kinda like a check method.
This returns if it finds the user agent *verbatim* in the response.