The parameter is necessary to match the auth handler interface, but is unused inside the method
Breaks out the validation code from the auth context modification calls, makes decorators easier to define and adds testing for each individual piece. Will be the basis of better error messaging in the following change.