verify using tpin