NextAuth credentials how to handle unauthorized user? - Theo's Typesafe Cult