Why do we need phone verification? How do we want to do this (is it a separate page/step or just on their account)