api.auth.getSession calls SELECT session and SELECT user separately
Calling getSession, if it doesn't find a cookie, it sends 2 DB queries to select the session and then the user. It would be a lot more performant to send a single query with a join, avoiding waterfall latency
