parsing consent string: consent string should be exactly 4 characters in length