Fix #249 - raise Response(400) for CRLFInjection

In keeping with our internal response, it's a child object of Response.