Check for version in server hello

Do not accept server hello packets that are for a different TLS version
than the one that was requested. Otherwise higher versions are reported
as supported if they are not. This requires a change in python-flextls:
https://github.com/DinoTools/python-flextls/pull/2