Skip XSRF check for github web hook