When returning HTTP errors, sleep one second first.

The major reason for doing this is that it makes it more likely the log
line will be seen and facted on before we attempt to generate a
response.  In particular, blockworthy clients can (and ideally will)
get blocked before we generate a response.