val validator: ApplicationCall.(T) -> Principal?
applied to an application all and session providing a Principal