webhooks need the option for webhook secrets

webhooks should have the option to have a webhook secret that is used to verify incoming requests are actually from billgang