validateReferralCode needs an identity_id