secret code validation upon registration