Make sure to remove bad sessions in SSL_clear() (found by Yoram Zahavi).