Add Brainpool curves to TLS, and prefer them by default.

Remove 224-bit NIST curve from default parameter list.
Simplify AD processing in non-AEAD case