add param guards
add back in generic OwinAuthenticationService type
make validation sample more clear on purpose
remove leftover generic cookie based two factor auth policy