extract a func for verification of x-hub-signature
rename, clean up