Limit the maximum number of Model errors to a reasonable value.

Fixes #490
The alternative to this would be to make `ModelStateDictionary` a scoped service. Seems like an abuse of DI though. Thoughts?