On [Getting started](https://developers.facebook.com/docs/graph-api/webhooks/getting-started/) document, on section `Responding to Event Notifications` there is an instruction to always return status `200`. On sample it returns `401` when the token validation fails. Which one is correct?