auth/spnego: move gensec_spnego_update_in() after gensec_spnego_update_send()