Bug 985784 - restrict allowable changes to X-Client-State value; r=telliott