Why does this say `verification_uri` if it's an object? Why do you need both?