some _SERVER sanitation protections

certain server vars can be manipulated by proxies and users.