don't pass authenticator class to authentiator on restore
pass session content to authenticator on invalidation
never pass authenticator class to authenticator