Want to make sure your post-receive hook only gets called by GitHub? Post-receive URLs now support HTTP basic auth.