security: fix memory leaks in SSPI