Verify Github webook secrets. Fixes #1

This ensures that the hooks actually come from Github, see:
  https://developer.github.com/webhooks/securing