Validate webhook request signatures

Checks the X-Twilio-Signature header on the guest Twilio webhooks and rejects requests when the auth token is missing.