Fixes JWT and callbacks
Adds webhooks validation
Bump to 0.4.0