Allow user provided GraphSessionInfo in validate()

This avoid two graph API calls to get session info.