as it works (and we want to use it) for any verification request, not just between two devices of the same user