Fix login response: return user directly instead of {user: ...}

The SWR useUser hook expects the user object directly, but the login
API was wrapping it in {user: ...}. This caused user.isVerified to be
undefined after login, triggering the email verification gate.

Made-with: Cursor

src/pages/api/login.ts

@@ -38,7 +38,7 @@ async function login(req: NextApiRequest, res: NextApiResponse) {
 		req.session.token = data.token;
 		await req.session.save();
 
-		res.status(200).json({user});
+		res.status(200).json(user);
 	} catch (error) {
 		console.error("Login error:", error);
 		res.status(500).json({error: "Login failed"});