You have allowed this request

<% if @token.oob? %>

The verification code is <%= @token.verifier %>

<% end %>