Is there a way to verify the session cookie without calling the API? - Better Auth