http_static: fix session cleanup