In the case of an express implementation of the backend with supertokens, would an unsuccessful verifySession() go to the next middleware handler or would it end the request response cycle?