Fix GHSA-97r5-pg8x-p63p - possible to 'verify' an account using a different users oauth credentials. (#1216)