instead we provide a authenticator specific provider which gets
used in the core to provide a full session interface.