Added option to allow sending a cookie without the corresponding certificate.

This option is required for the cisco clients, that do not always use the
client certificate. When this option is set to false it means that the cookie
itself is sufficient for authentication. This is bad practice of smart cards
are in use.

src/worker.h

@@ -87,6 +87,7 @@ typedef struct worker_st {
 	uint8_t master_secret[TLS_MASTER_SIZE];
 	uint8_t session_id[GNUTLS_MAX_SESSION_ID];
 	unsigned auth_ok;
+	unsigned cert_auth_ok;
 	int tun_fd;
 	
 	struct http_req_st req;