Verify auth with or without code allowed.