tls_session: notify observer of TLS state change

When setting the state directly, state change callbacks are not called.

State is now always set by the TLS handler thread, which will call state
callbacks.

Change-Id: Iffd03a2b20a3bf0527aa404914728ed1d889288b