Import by URL form: proper validation of remote Mercurial HTTP server
This time, because of the comeback of #524 (closed), we go all the way and perform the validation.
Our previous disabling was no longer effective, perhaps simply because the validation became an async call from the front end in the mean time.
This also should give us tools for #406 (auto-detection in import manifest)