add access code validation