fix wrong namespace route
remove comments & add real webhook url
skip authenticity token to receive hooks