user32: fix for the ending of menu tracking in the default handler of WM_CANCELMODE message.

[Rein Klazes]

Hi,

Proposed fix for some problems mentioned in the previous patch.

I hope putting the logic in menu.c is an acceptable way to cross
 the window<->menu border.  If you want it somewhere else, let me know.

Rein.