they use an older version of supertokens which only has session management in it. All other features like login, email verification are not provided by supertokens in it