Authservice should not drop requests when invoking callback url after session expiration

[tylerschultz]

If a user were to take too long to log in (a time period longer than the session timeout), the user's request will be dropped by envoy leaving the user waiting for the authservice to redirect to the app url, which will never happen. The auth service should return an http response explaining what has happened.