Strip CR/LF out of any response headers we set.
Merge bug26433
stable to default