add the --verify option

This is the second attempt at #535 - this time targeting the gulp 4 branch. I think I've tackled all the comments left in the original PR (#668) 
seems like a fair amount of wheel reinvention, why not use a better module for sending JSON requests? `request` is bloated but `superagent` is good