calculate encPMS before the audit goes live + other improvements

calculate encPMS before the audit goes live was untouched since the last time you reviewed it.
Another significant changes:
we dont make a fake page reload anymore to get the http headers.
we sanity check tls record length