strip \r and \r from content-disposition filenames