Allow multiple validators

Switch User/Password/Role validators to IList instead of a single instance, this will allow us to split apart functionality i.e. (UniqueEmail, UniquePhoneNumber) instead of requiring one mega validator which should help with some of the validation extensibility issues

cc @divega @suhasj  
Should we also check if Count() is greater than zero else throw ?