verify the signature of github hook