HH-35189 set header length cap to a more appropriate value

Conflicts:
	tornado/web.py
HH-40589 fail-proof headers decoding