Verify incoming package.

Bail out if the incoming package is'nt an Access-Request or if the
request is'nt ACCEPTed or REJECTed.

Thanks to Heikki Vatiainen for the idea.