http_negotiate_sspi: Use correct return type for QuerySecurityPackageInfo()

Use the SECURITY_STATUS typedef rather than a unsigned long for the
QuerySecurityPackageInfo() return and rename the variable as per other
areas of SSPI code.