Custom logic validation

I'm trying to block a sign in flow from certain user types and some custom validation like if the user is banned but throwing in the after hook still sets the cookies, is there a way to clear them? I could use the before hook but i have to manually fetch the user. Is there a better way to do something like this?