New guideline: must not use headers for business parameters

[ePaul]

Due to confusion with the current rule 183, we want to add another rule (as first rule of the "proprietary headers" chapter), which makes it clear that HTTP-headers are not supposed to be used for business parameters.

We can use the first paragraph of 183 in the text.