curl --request POST \
  --url https://{appId}.session.prelude.dev/v1/session/login/otp/check \
  --header 'Content-Type: application/json' \
  --cookie __verification-login_%7Bapp_id%7D= \
  --data '
{
  "code": "<string>"
}
'

{
  "code": "bad_request",
  "type": "bad_request"
}