X_SESSION_EXPIRED
Means
session passed its idle or absolute expiry
Typical cause
cause names which of the two clocks ran out
Fix
sign in again, or raise session.absoluteTtlMs / session.idleTtlMs in defineAuth({ session }). The wiki used to name POST /auth/sign-in here; the framework mounts no such route, and the password half is the app's until it ships one