2) verifying a login --> do you mean session verification? If yes, see this: https://supertokens.io/docs/thirdpartyemailpassword/common-customizations/verify-session