simplified verification code. exempted get from xsrf token requirement.