Specify webhook.secret as a password
Merge pull request #840 from github/webhook-secret-is-a-password

Specify webhook config 'secret' as a password