skip UTF-8 or 16 BOMs if you find one.  There's other BOMs but this should do for now