hmac-sha1 take1 wip
turn off body-params which was emptying request body and parse json explicitly

Also Revert "turn off commenting for reopening, no more training wheels"

This reverts commit 14fbbe8bc66ae371d3d07237b2b247486f4971ad.

Conflicts:
	src/gh_waiting_room/service.clj
fix tests broken by removing json-ware and action rename
clean up webhook body
add tests for hmac-sha1 auth, clean up logging
ignore local leins
move util fns to util
thanks @visibletrap
actually add util
update docs to mention $GITHUB_HMAC_SECRET
add secret to hooks and create-hook
less is more
remove reopened, again
I really prefer created to opened :facepunch: :facepunch: