Checks the session for authkey and asks the backend that generated it to
validate it and return authenticated user.