github hook token

This includes:
  - Rename the existing HOOK_TOKEN to be CORE_API_TOKEN since that is what we're actually using it for.
  - Compare the hook_token received from github with a hash of the repo url and see that they match.

Once this has been merged (assuming #27 has been merged) all tests pass.