http streams: only split headers into two pieces

Limit header explosions to two pieces to avoid truncating header data containing colons.