The importance of verifying webhook signatures