Update outbound AH processing.

Use xform_data structure to pass needed information to xform callback.
Use SA lock to protect access to replay window structure and cryptoid.
Use new rules how we hold references to SP and SA.