Refactoring of validations

I found that in some cases (like Stale timestamp), the strategy doesn't return the correct Hawk error.
The previous behavior in a stale timestamp, the error from the strategy was an invalid login, not the real error.