Improve IUserValidator doc comments.

- IUserValidator.Validate can return null, meaning not authenticated / anonymous.
- Showed this in the demo.
Fix indentation; add braces around single-line if.
Merge pull request #1148 from rlipscombe/iuservalidator-comments

Improve IUserValidator doc comments.