Two excellent ways to verify user identity