How and where is the user verification code used?