only use SSO id if it came from Coinbase