add boolean validation on phone.verified, and update phone endpoint to allow for setting verified to false