Whats the best way to update the session payload? we got a /api/auth/renew endpoint with this logic

js
      const newSessionPayload = await createSessionPayload({
        res,
        userContext: {},
        userId: session.getUserId(),
        sessionData: session.getSessionData(),
      })

    await session.mergeIntoAccessTokenPayload(newSessionPayload as JSONObject)

// (this is what we did)
   // await session.updateAccessTokenPayload(newSessionPayload, {})

Seems like this is the way, but on production we dont get a response cookie back?