Drop headers using characters other than alpha numerics and '-' to avoid spoofing and to consistently match Apache 2.4 behaviour.