Ok problem solved. I had to disable CSRF (Prevent Cross Site Request
Forgery) in Jenkins Security Config, as it was preventing correct
webHook activity through github.