post:
  operationId: cancelOTPSession
  summary: Cancel intermediate OTP session
  description: |
    Destroys the intermediate password session created in Step 1.
    Used when the user presses **"Go Back"** from the Step 2 OTP screen
    without completing login.
  tags: [staffManagement]
  requestBody:
    required: true
    content:
      application/json:
        schema:
          $ref: "../../components.yaml#/components/schemas/CancelOTPSessionRequest"
        example:
          session_token: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
  responses:
    "200":
      description: Session cancelled successfully. Empty response body.
    "400":
      $ref: "../../components.yaml#/components/responses/Failure"