Http header CR / LF validation

[vietj]

motivation

Currently HttpClientRequest and HttpServerResponse don't check wether header name or value contain \r or \n chars. Of course developers are fully responsible for http headers set and
such incorrect value is likely unintended. Forbidding it prevents HTTP header injection for application that omit to check headers.

change

throw an IllegalArgumentException when a header name or value contains \r or \n char