Validate secret argument in verify

closes #2