Rewrite restartServer() for robustness

This uses an instance wide token set in the application environment to
detect when the server has restarted.
Update the module list
[squash] disable stop on failure