WIP: Add session hash and remote CCS

PR so this can be reviewed.
Yes, but since we haven't specified 0-RTT, let's wait :)