Use CR+LF for HTTP newlines

It’s mandated by the HTTP protocol.
Allow Host and User-Agent HTTP request headers