Currently the authentication is based on matching the local email address to the one returned by Google auth. We can improve by user Google user ID.