both auth code and code verifier should be non-empty - Supabase