[USER32] Capture the security descriptor from the caller when creating a window station

When creating a window station with CreateWindowStationW, the function ignores the security descriptor provided by the caller and instead it uses whatever descriptor the system can find.

win32ss/user/user32/misc/winsta.c

@@ -104,7 +104,7 @@ CreateWindowStationW(
                                lpwinsta ? &WindowStationName : NULL,
                                OBJ_CASE_INSENSITIVE | OBJ_OPENIF,
                                hWindowStationsDir,
-                               NULL);
+                               lpsa ? lpsa->lpSecurityDescriptor : NULL);
 
     /* Check if the handle should be inheritable */
     if (lpsa && lpsa->bInheritHandle)