Using SMS one-time code instead of App for authentication of transaction