authenticate post requests to outgoing webhook