Add SecurityStampValidator and unit tests