Fix typo in SessionInterface::validateAuthCode docblock

Docblock lists an array response format, but the @return specifies int|bool.
Actual implementation in the AuthServer uses the @return specification.