When looking up a web session, if any attribute fails to deserialize, we drop the session.  However, we are currently only detecting IOExceptions.  An invalid lambda deserialization results in an IllegalArguementException, and results in a request failure.

Our marshallers should wrap RuntimeExceptions as IOExceptions, so they will be handled as expected.