Verification code generation - and use