Rather than rejecting requests, allow configuration to either ignore UTF8 headers, or, parse them, even if they're illegal.

I suggest an enum Reject, Ignore, Parse.

However on output we should still be strict, UrlEncoding cookie values etc.

See #1076 and #1125

edit by @muratg: We should also consider request line when we get to this. #2647