refactoring auth_callback_validator validate_*! methods as public; updating test coverage