23.08.2016, 13:16
You need to be in the same timezone, or at least use the same time in the App and on your server. Also you should check for codes ±30 seconds as the time on the device could be slightly out, or in the time taken to input the code it has expired.