SSL.state: Consistency fixes.

SSL.state()->session was sometimes an SSL.connection and sometimes
an SSL.session. Change the name to connection, and have it always
be an SSL.connection.

SSL.state now creates its alerts via SSL.connection()->Alert(),
which in turn uses the alert_factory() in SSL.context.

Also adds descriptive messages to the alerts created in SSL.state.