urlmon/tests: Add tests for HttpProtocol behavior when it is called without the BINDF_FROMURLMON flag.

The number of allowed hex digits should be 8, not 6.

advapi32: Add the size of the security descriptor structure to the size of memory required in ParseStringSecurityDescriptorToSecurityDescriptor.

advapi32: Fix a typo in ParseStringAclToAcl which caused the ACE to be written inside of the ACL memory.

Use GetSidLengthRequired instead of computing the length in a way that 
won't always be correct.

wininet: Certain options of InternetQueryOption can take a NULL handle, so don't do the NULL handle check at the beginning.