Handle Asana resthook confirmation

Asana and other services implementing the Resthooks specification send a confirmation request with an X-Hook-Secret header when setting up webhooks. Aha! responds with the same secret to confirm the webhook endpoint is valid.