Do not allow more than 8K HTTP header (potential DOS attack)