Resolve write after free for dead dhandle

A description of the failing scenario is in BF-21150. The introduction of cursor caching made it possible that the session_inuse count can go to 0 before the session_ref count goes to 0. The likely fix will be to change the order of operations in __wt_cursor_dhandle_decr_use.