Server verifies first

[Sc00bz]

I noticed that the server verifies first instead of the client verifying first. Also when the client verifies they can also send encrypted data, saving an RTT.

Current:

C->S: client id
C<-S: version, algo, opslimit, memlimit, salt
C->S: X
C<-S: Y, server verifier
C->S: client verifier

Should be:

C->S: client id
C<-S: version, algo, opslimit, memlimit, salt, Y
C->S: X, client verifier
C<-S: server verifier

With blind salt it will look like this:

C->S: client id, blind salt
C<-S: version, algo, opslimit, memlimit, blind salt', Y
C->S: X, client verifier
C<-S: server verifier