move verification method to web service