enabling cisco-client-compat allows 'stealing' of processes.

This change puts a proc_st that its client has terminated to a "zombie"
state. That state will allow a client that connects later using the
same TLS session ID to reclaim it. That way clients that try to authenticate
by sending their credentials in different sessions can still authenticate with
ocserv. That however puts more trust to worker processes (as the main
process has no way of telling whether a TLS session is certainly
resumed).

src/worker.h

@@ -79,12 +79,7 @@ struct http_req_st {
 	unsigned int next_header;
 	unsigned char cookie[COOKIE_SIZE];
 	unsigned int cookie_set;
-	/* some CISCO clients reconnect for each request
-	 * and is impossible to keep state for them. For
-	 * that we ask username and password in one go for
-	 * them.
-	 */
-	unsigned int needs_compact_auth;
+
 	unsigned char master_secret[TLS_MASTER_SIZE];
 	unsigned int master_secret_set;