it should send the user a verification code and then the user should type it back into the bot so that the bot knows its his account