I am building a booking app. I have build a sign up and login form. My Sign up form sends a verification code that requires the current user to enter it within a 20 minute period in order to sign up. I have found that a user who did not complete the sign up process, finds it possible to sign in and are directed to a new page I created. I want to forbid users who did not follow the signup process and entered the verification code from gaining access to my app.
Please help me with this issue i am facing.