verify server identity.