better anti-spoof: xmit 1st beacon before presence announcement; downgrade anti-spoof from error to mismatch