Allocate udata for extensions.

This fixes #98.
Add hashlimit match test.
Deal with negations