validate x-hub-signature headers, closes #9
1.0.0