[FIX] http.dispatch: call handle_exception() even w/ session missing/expired