should verify api.hipchat.com to avoid mitm attacks