I figured it out... so for anyone else trying to figure this out:
You need to set the read permissions on the App client to read the Email Verified attribute.
Go to: General settings -> App clients -> Show details -> Set attribute read and write permissions link and check off Readable Attributes: Email Verified