How to update id_token on SPA once user clicks email verification link