Then requests to /auth/* will start working (via the SuperTokens middleware), since a session exists