Increased security of webhook verification

Use constant time comparison to avoid timing attacks