add auth.verify method