1. generate friendly 3 digit confirmation tokens
2. ignore conflicts as verification should be phone number + confirmation code