Authenticator for validating active session count