move verify into the service.