keep json/urlencoded limits at 1mb for back-compat