Authenticate the given request. If authentication fails, e.g. due to missing or invalid information, such as
credentials, the authenticator should return null
, which can be communicated to the client by implementing
applications using a 401 status response.
Handles authentication for requests.