guard for x-hub-signature