verify sms flow