getValidator always returns `AuthValidator@cbsecur...
# box-products
g
getValidator always returns
AuthValidator@cbsecurity
which requires an authorized user, otherwise always returns