The Google response contains an `email_verified` field instead of a `verified_email` field, and so we weren't treating verified Google accounts as verified.