adds webhook challenge verification support