http_response: disallow blank, multi-value headers