Improved logging on OID authentication, and make sure that only Google
OID is trusted for email-based authentication