use json instead of atom, use hub.secret to auth hub

 * json can be much faster to parse, and now we don't need to
   keep track of the feedparser library
 * without hub.secret, anyone who guesses our feed ids can post
   whatever they want to us.
 * also fixed some typos