Add a test to check that if a PSK extension is not last then we fail