Google OAuth ID token (JWT) obtained from Google's OAuth flow. The token is verified
with Google's tokeninfo endpoint. If a user with the same email or open_id exists,
they are logged in. Otherwise, a new user is created and assigned to the Public
organization.