Of/oc 9686

Allow the max_request_size to be tuned via app.config.  In the absence of the config value, the original default of 1000000 is maintained.  If the config value is set to disabled, all requests will pass enforcement.  This PR also includes preliminary support for envy for application environment interrogation.