http 500 on certain unicode characters in Content-Type

Returns a 500 error for any Content-Type with a character from \u0080 to \uffff.

Request:

POST /v1/secrets HTTP/1.1
Host: localhost:9311
Content-Length: 248
Accept-Encoding: gzip, deflate
X-Project-Id: 3793662244d04d2c96edb3a52808cd2b
Accept: */*
User-Agent: python-requests/2.5.1 CPython/2.7.5 Darwin/13.4.0
Connection: keep-alive
X-Auth-Token: [VALID TOKEN]
Content-Type: Ä (\u0080)

{"name": "AES key", "algorithm": "aes", "payload_content_type": "application/octet-stream", "payload_content_encoding": "base64", "mode": "cbc", "bit_length": 256, "payload": "gF6+lLoF3ohA9aPRpt+6bQ==", "expiration": "2018-02-28T19:14:44.180394"}

HTTP/1.1 500 Internal Server Error
Content-Length: 131
Content-Type: application/json; charset=UTF-8
Connection: close

{"code": 500, "description": "Secret creation failure seen - please contact site administrator.", "title": "Internal Server Error"}

Stacktrace:

2015-02-10 11:57:25.165 18864 ERROR barbican.api.controllers [-] Secret creation failure seen - please contact site administrator.
2015-02-10 11:57:25.165 18864 TRACE barbican.api.controllers Traceback (most recent call last):
2015-02-10 11:57:25.165 18864 TRACE barbican.api.controllers File "/Users/char7232/tests/barbican/barbican/barbican/api/controllers/__init__.py", line 95, in handler
2015-02-10 11:57:25.165 18864 TRACE barbican.api.controllers return fn(inst, *args, **kwargs)
2015-02-10 11:57:25.165 18864 TRACE barbican.api.controllers File "/Users/char7232/tests/barbican/barbican/barbican/api/controllers/__init__.py", line 81, in enforcer
2015-02-10 11:57:25.165 18864 TRACE barbican.api.controllers return fn(inst, *args, **kwargs)
2015-02-10 11:57:25.165 18864 TRACE barbican.api.controllers File "/Users/char7232/tests/barbican/barbican/barbican/api/controllers/__init__.py", line 136, in content_types_enforcer
2015-02-10 11:57:25.165 18864 TRACE barbican.api.controllers _do_enforce_content_types(pecan.request, valid_content_types)
2015-02-10 11:57:25.165 18864 TRACE barbican.api.controllers File "/Users/char7232/tests/barbican/barbican/barbican/api/controllers/__init__.py", line 125, in _do_enforce_content_types
2015-02-10 11:57:25.165 18864 TRACE barbican.api.controllers expected=valid_content_types
2015-02-10 11:57:25.165 18864 TRACE barbican.api.controllers UnicodeDecodeError: 'ascii' codec can't decode byte 0xc4 in position 1: ordinal not in range(128)
2015-02-10 11:57:25.165 18864 TRACE barbican.api.controllers
2015-02-10 11:57:25.167 18864 WARNING barbican.api.middleware.context [-] Unable to retrieve request id from context
{address space usage: 2593398784 bytes/2473MB} {rss usage: 79302656 bytes/75MB} [pid: 18864|app: 0|req: 1995/1995] 127.0.0.1 () {36 vars in 2353 bytes} [Tue Feb 10 11:57:25 2015] POST /v1/secrets => generated 131 bytes in 3 msecs (HTTP/1.1 500) 3 headers in 125 bytes (2 switches on core 0)
=== Impact: ===
Low
=== Systems Vulnerable: ===
Local environment
=== Suggested Mitigation: ===
Enforce a reasonable character set on the Content-Type header.
=== Further References: ===
No references given