[#71716228] Relocate validate_session to SecureController

Signed-off-by: Gerard Cote <grcote@gmail.com>