Explain the concept of 'soft 404' in web security, how it can be misleading with HTTP status code 200, and demonstrate how to use curl commands to identify such responses. Provide examples of curl commands that check response headers, content length, and other parameters to distinguish between genuine 200 responses and 'soft 404'.