clear memory to avoid CVE-2014-0160 (Heartbleed)

Ensure that the memory buffer used for the heartbeat response is cleared before copying the client-provided contents. This avoids responding with previous memory contents due to e.g. a malicious client providing an input payload that is smaller than the requested length.