improve CGI environment handling

rewrote environment handling for REST requests (currently GET only)
now environment will be based on actual request data and headers
all sensitive headers will not be exposed to user application
more standards-compliant handling of SERVER_NAME and SERVER_PORT