Add ability to verify an OTP

https://www.pivotaltracker.com/story/show/78629110
As discussed, this is not so much a `DomainException`, it's an `InvalidArgumentException`. The message could also use some love ("does not adhere to required format" or something") :wink: