Drop idle HTTP sessions in a safe manner