wg: fix MOD_LOAD to fail properly if cookie_init() fails

Previously we'd jump to the free_crypto label, but never set ret to
a failure value -- it would retain success from the call just prior.

Set ret up properly.

This is part of D40708, but not the main point of the change.