don't protect web hooks and deal with malformed requests
Merge branch 'hotfix/notify-auth'