Move server code into event FINAL callbacks

[trigg]

Move final action of most (not all) events into the FINAL callback.

Not for anything that has a plaintext password (user create, user auth)

Paves way for if we wish to async any of it later.