identity validation: add SMS callback