move google verification code into app folder, makes more sense