Fix a typo that slipped in to the webhook code.

It looks like I had a change that I missed committing, fixing _secure to be
_is_secure. Trivial fix.