lb: fix http client leak

[alrs]

This is a simple change that has a needlessly confusing diff.

defer resp.Body.Close() was being called in an infinite loop, meaning it never fired. This put the entire contents of the for loop into an anonymous func() so that the defer happens once per loop.