Fix unsafeRegisterCard.

Well, it *is* a hack, after all!
Refactor startHttpServer, add logging.
Allow hook URLs ending in / to work.
On timeout, display which events were not received.
Remove unneeded testSearchEvent and testEvents.

The former isn't necessary because we use checkEvent.  The latter wasn't
used anywhere.
Bump version to 1.9.2.