add doc for verification code handling