Fix CVE-2014-2338

Prevents a responder peer to trick us into established state by starting
IKE_SA rekeying before the IKE_SA has been authenticated during IKE_AUTH.

Fixes CVE-2014-2338.
4.5.2-1.1-bpo60+5+hydrogen5