Fix webhook signature verification