extract rotation logic to TokenService

src/main/java/com/ddf/vodsystem/security/GoogleVerifierService.java

@@ -25,12 +25,20 @@ public class GoogleVerifierService {
             throw new NotAuthenticated("Invalid ID token: " + e.getMessage());
         }
 
+        if (token == null) {
+            throw new NotAuthenticated("Invalid ID token");
+        }
+
         String googleId = token.getPayload().getSubject();
 
         if (googleId == null) {
             throw new NotAuthenticated("Google ID does not exist");
         }
 
+        if (!Boolean.TRUE.equals(token.getPayload().getEmailVerified())) {
+            throw new NotAuthenticated("Email not verified");
+        }
+
         return new GoogleUser(
                 googleId,
                 token.getPayload().getEmail(),