Added missing locking. Changes of handlers at runtime should be safe now.

This is a fixup for 0f8656e "Allow to add and remove handlers at runtime.". I'm not entirely happy with
requestAndHandler: forMethod: url: headers: path: query: but the locking must happen inside GCDWebServer.