don't hold lock while draining connections

this prevents them from unregistering in their http handlers, causing a hangup