actually return a response for /webhook... oops!