Only restrict HTTP application data and header block fragment lengths.

This commit reverses 2582bc5 addressing #260.