What is the use case for choosing auth.getSession() over auth.getUser() and vice versa? - Supabase