Fail requests with Expect:continue on the local interface.

This might or might not fix CVE-2011-3596; difficult to say, since
nobody seems to want to tell me what said CVE is about.
Update CHANGES for 1.1.0.