Proper way to verify the signature coming from WooCommerce webhooks