recovery implemented, some basic tests; tons of ghetto fixes
log provision failures whether or not we force shutdown
durability fixes in recover: force a group write after recovery attempt,
run the queue loop if in serial mode
test cleanups
added raise tests as well, a few more paranoia assertions