add verification code handling