Updates ValidateCurrentUser so that it doesn't re-decrypt the cookie since that is already done, it just needs to check if the current user is authenticated and if it is a back office identity. Added lots of notes for extension points when we start looking at extending how the back office auth works.
Merge branch '7.2.1' of https://github.com/umbraco/Umbraco-CMS into 7.2.1