Race conditions in connection::cancel()

The cancellation mechanism in `connection::cancel()` is currently quite rudimentary, and subject to race conditions. If cancellation is called after an operation has completed, but before its handler is called, `connection::cancel()` does nothing. The correct way to handle this is using per-operation cancel. 