Include auth in validation context. Closes #2238