When calling auth.api.getSession, why is the user key inside the session object sometimes undefined? - Better Auth