Fix a horrible BN bug in bn_expand2 which caused BN_add_word() et al to fail