Verifies a code against a challenge. The verification code is provided by the user by entering a code seen in their authenticator app.