Move async-with decorator for session in BaseHTTPEndpoint in the outer scope to session.rollback

[dolamroth]

Otherwise, the session might be closed before actual await session.rollback() is called