tcp: validate seq for handshake ack