Add documentation about webhook verification