Adds an authentication filter to the list. For every application call the specified predicate is applied and if it returns true then the authentication provider is skipped (no auth required for this call with this provider).
fun validate(block: suspend ApplicationCall.(T) -> Any?)
Sets a validation function that checks a given T session instance and returns principal Any, or null if the session does not correspond to an authenticated principal.