Keycloak provider using session id as user id instead of subject id - Better Auth