add support for collision handling

system now uses a list of mptcp conntracks candidate that are elimininated as
the hmac authentication advances.