Walk me through how you would secure a webhook endpoint that receives highly sensitive user data for Asana Spa.
