validate users auth-code and phone