SessionCheckSuccess: { mode: "none" } | { claims: JWTPayload; mode: "id_token" }