tls: fix session state update on accept