web: Fix HEAD body and Content-Length

For HEAD requests, we MUST throw away the body, for all other
requests we SHOULD return a Content-Length.