Fix off-by-one in header validation

This makes the two nonce checks (in validateHeader() and ValidateBlock()) consistent. Note this is not the same as f383ad69.