Allow a limited number of retries for verification code validation

Following the discussion started at #33