finished otp verify policy