increased max allowed header size

increased allowed header size to support Kerberos SSO authentication. With the default header, the "Negotiate" header which is sent by the browser is too long and the browser gets back 400 error (Bad Request)