Fix #249 - raise Response(400) for CRLFInjection

In keeping with our internal response, it's a child object of Response.

<!---
@huboard:{"order":3.75}
-->