How does Supabase handle session management when working with Next.JS API routes ? - Supabase