What if multiple people share the same login? Who should do the identity verification?