Validate that webhook POSTs come from github.
Use the correct hmac algorithm.
Merge pull request #22 from ralphbean/feature/verify-sig

Validate that webhook POSTs come from github.