file requests were missing the length response header.

the tests needed re-ordering to make sure the size is determined, also the
hack for flash is the max limit not the size to use all the time.