Test for CRLF (0x0D0A) termination on the routing token 

This fixes session redirects for TLS/NLA using token based routing. 
Kemp VLM appears to send the routing token with CRLF already present, so hardened against duplicating the terminator.