HttpSM should use hsm_release_assert consistently

hsm_release_assert dumps the internal state of the HttpSM object. Everywhere there is a ink_release_assert, we really ought to be using hsm_release_assert.