tor-proto: set HalfStream::connected_ok right.

Previously we'd always set it to true, allowing one CONNECTED per half-closed stream even if the stream had already received a CONNECTED cell.

This resolves an XXXX.