(fix) Harden header parsing against memory exhaustion attacks.

Adds new limits on the lengths of header names and fields.

Fixes #187