Bring down allowed http header size to 4K, perhaps should be tweakable?