protection against injection of $wgProxyKey from register_globals