not verifying what should be verified