Also, I suggest that you use

verifySession

instead of `getSession`: https://supertokens.io/docs/thirdpartyemailpassword/nextjs/session-verification/in-api#3-call-the-verifysession-session-function