Authenticate chatbot users with SMS one-time passcode