Message authentication

Pass original document to Authenticator.validate() instead of the UUID which seems to provide little value.