SARS-CoV-2 spike protein binds heparan sulfate in a length- and sequence-dependent manner