email_verified to true/false in the database, the user object returned from still contains the old value of this field, making it confusing for the user to see if their email verification worked or not. The only way to update this is for the use to log out and back in, which isn't ideal of course.