Signing and verifying Stripe webhook signatures.
Forked from the Dashbit blog.
Signs payload with timestamp and secret.
Verifies payload against signature and secret.