Refactored the overload solution

we are at least looking for specific parameters, but you don't validate server side what you are `sending` so `code_type` and `code` could be anything and malicious.