Can I see your backend and frontend config? Cause the behaviour you mentioned should not be happening. For example, visit emailpassword.demo.supertokens.io and see how it should be behaving.