https://torbjornzetterlund.com/securing-http-trigger-in-google-cloud-functions/