Bug#858143: xrdp: CVE-2017-6967: incorrect placement of auth_start_session()

[Salvatore Bonaccorso]

Control: severity -1 serious

Rationale: fix should make it to stretch before the release.

Regards,
Salvatore