Added methods to verify subscription signatures and challenges

Currently you have to write the challenge method for verifying Subscriptions yourself.
Checking the "X-Hub-Signature" is also not possible outside of the process_subscription method.

This PR fixes that.