Here's the updated version of my patch.  It returns a string, but
doesn't clobber bytes that are contained in the string.  Naive code
(basically code that expects ASCII strings from unquote) should continue
to work as well as it ever did.  I fixed the problem with the email
library, and removed the bogus test from the http_cookiejar test suite.