add ability to verify and require pubsubhubbub X-Hub-Signature headers using the HUB_SECRET variable

Signed-off-by: Joshua Rubin <jrubin@zvelo.com>