I want the session to be managed only by our api. Our nextjs, both on the browser and the server-side, is just a "client" that is not really holding or mutating state.