use zvelos version of hubot

Signed-off-by: Joshua Rubin <jrubin@zvelo.com>
require valid pubsubhubbub X-Hub-Signature

Signed-off-by: Joshua Rubin <jrubin@zvelo.com>