Check fingerprint length for web clients.

This helps prevent malicious web clients (outside of the browser)
from being able to generate MD5 collisions to impersonate other
clients' fingerprints.