AP-1860 Update webhook handler to verify signature