auth.signOut does not nullify the user object - Supabase