Re-revert (re-insert?) temporary change that made renegotiation work again

and add a proper fix: specifically if it is a new session don't send the old
TLS ticket, send a zero length ticket to request a new session.