This patch uses the common struct ip_auth_hdr declaration from ip.h.
The header declared in ipt_ah.c was wrong, so this makes matching actually
work.

Best regards,
Patrick