The type of the principal value returned by validate.
Name of the cookie to read (e.g. "session", "sid").
OptionalnameCustom scheme name (default: "cookie").
Validate the cookie value and return the principal data, or null
if the cookie is invalid / session expired.
The implementer is responsible for session lookup, signature verification, etc.
Configuration for cookieScheme.