Much better security handling for webhook requests