wininet: Retrieve the maximum token length from the SSP and use a buffer of that length in calls to InitializeSecurityContextW.

Otherwise, InitializeSecurityContextW could run out of space with our
small, fixed buffer and fail.