auth.api.getSession doesn't reading Authorization header - Better Auth