remove 'verify' step from the client-side authentication process, will be handled on the 3rd-party's server