Check block header before accepting it.

Previously, AcceptBlockHeader did not check the header (in particular
PoW).  This made the client accept invalid-PoW-headers from peers in
headers-first sync.
Merge pull request #5270

57425a2 Check block header before accepting it. (Daniel Kraft)