fix: session verification

[domsen123]

the method verifyIdToken throws an error, if token can't be verified.

So we have to handle this, instead of if-else.

[posva]

We should indeed probably try catch this. Do you know when this method can throw an error? Depending on the error, it could also be better to propagate it

[domsen123]

it can throw an error when the token was revoked before (error.code === 'auth/id-token-revoked')

as the verification is part of the plugin "./runtime/auth/plugin-mint-cookie.client.ts", I dont know, where we can propagate it to the client.