added fxa-verifiedEmail to the signed certificate. fixes #630