Just an idea. 

Maybe we can remove the $account from the ``process()`` function, and instead we can have ``$handler->setAccount()``.
Then ``$handler->getAccount()`` will either return the set account, or call the authentication provider to get one.