CVE-2016-2114: s4:smb2_server: fix session setup with required signing