Add cow_http_hd:parse_allow/1

From RFC7231.
Improve internal cow_http_hd function token_ci_list/2

We now ensure that the tokens are made of token characters only.