Move ciphersuite selection before session resumption in TLSv1.3