ValidateCredentials pipeline

Order	Pipe	Description
100	ValidateFromIdentity	Uses the IAuthenticationService to determine if FromIdentity is not locked out and is in PunchOut role.
200	ValidateSenderIdentity	Uses the IAuthenticationService to determine if SenderIdentity is not locked out, is in PunchOut role, and validate username/password.
300	SetUserAsAuthenticated	Uses the IAuthenticationService to set FromIdentity user as authenticated.