handle CONNECT failures a little more gracefully