FTS-102: Adding missing rollbacks
FTS-102 Remove session on error on auth middleware

Because this bit was missing, if the database went away the Session
was left in an unusable state and the server didn't return back to its feet
after the database was up again.