Checksum validation update

Here's a revival of the work on packet checksum. This is a rebase of https://github.com/inliniac/suricata/pull/396 with one patch added to provide a -k option similar to the one used in snort.