Improve IUserValidator doc comments.

- IUserValidator.Validate can return null, meaning not authenticated / anonymous.
- Showed this in the demo.