fixed otp check