Validate the authority field for delegating IdPs

The validation of that field should happen in the parser so that
invalid values never make it to the callers.