sys/transceiver: cleanup and fix for cc2420 and at86rf231

cc2420: the payload pointer was set twice
at86rf231: payload_len was not copied from the radio driver buffer