fix: avoid deprecated "out-of-band" authentication flow

[tswast]

Thank you for opening a Pull Request! Before submitting your PR, there are a few things you can do to make sure it goes smoothly:

• Make sure to open an issue as a bug/issue before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea
• Ensure the tests and linter pass
• Code coverage does not decrease (if any source code was changed)
• Appropriate docs were updated (if necessary)

Fixes #184 🦕

[tswast]

Note: this code is pulled from pydata-google-auth, but I was the sole author of the module and tests.