Merge pull request #74 from jaw187/master

Updated docs

README.md

@@ -40,8 +40,9 @@ takes the following required options:
   not trigger a redirection. Requires **hapi** version 6.2.0 or newer. Defaults to `true`;
 - `validateFunc` - an optional session validation function used to validate the content of the
   session cookie on each request. Used to verify that the internal session state is still valid
-  (e.g. user account still exists). The function has the signature `function(session, callback)`
+  (e.g. user account still exists). The function has the signature `function(request, session, callback)`
   where:
+    - `request` - is the Hapi request object of the request which is being authenticated.
     - `session` - is the session object set via `request.auth.session.set()`.
     - `callback` - a callback function with the signature `function(err, isValid, credentials)`
       where:
@@ -187,4 +188,3 @@ server.route([
 
 server.start();
 ```
-