Forbidding the use of pseudo-header fields

Tightening the language around the definition of malformed requests
and responses to support this.