added user verification spec and logic