get_user method on python with the access_token from the client, but it's not giving me the session. When I use set_session with both refresh_token and access_token it works., but sharing refresh tokens everytime seems like an anti-pattern. Can anyone clarify?