Add a way to limit deserialized string lengths and use it.

The deserializer for old strings is removed, so that the code is forced to use LIMITED_STRING for every string that is being deserialized.

s/12/CMessageHeader::COMMAND_SIZE ?