Add legacy webhooks worker implementation

Add test for internal auth

auth/middleware_test: test invalid auth cookie

Add basic auth tests