Require secure renegotiation (RFC 5746)

bail out if the extension or ciphersuite is not present in the
handshake. addresses #3