Store verify_result with sessions to avoid potential security hole.