colossus.protocols.http
by default we're going to disallow multivalues on everything except those defined below