New security feature:  Reject any query parameter, POST parameter, or cookie
whose name contains a non-alphanumeric character.  No know vulnerabilities
exist because of this.  I'm just be paranoid.  This enhancement is inspired
by Drupalgeddon2.