fix callback URLs, recreate callback hooks, enable 'insecure ssl' flag on hooks for self-signed certs