syncookies: fix inclusion of tcp options in syn-ack