Throw a session-expired error when the PKCE verifier is missing and keep the settings component mount redirect-compatible.