Fix breaker being stuck in open state

When a failure arrives after the breaker enters half-open, the state
machine would reenter open without rescheduling a timeout to enter
half-open again.  For services that have outages that exceed the
cooldown period, this would keep the breaker always open.