verify github payload