Some minor fixes: obsessive security and valgrind

Eliminate at the root any hope of crafting malicious headers
Workaround historical bug of XrdOucString (squelches Valgrind warning)