don't protect web hooks and deal with malformed requests
Merge branch 'hotfix/notify-auth'
Merge tag 'notify-auth' into development

don't protect web hooks