don't serve read requests during quorum loss

otherwise client can't tell if the server is serving stale data. when the server loses quorum it should return 503 on both read and write requests, and also cancel all the pending watches.