mark IEventHandler's generic param as "in" for covariance
add extensibility sample for auditing authentication events