Use 411 audit to indicate token validation failure

[bongiovimatthew-microsoft]

There is a TODO item in the code:

function: Process-EventsForAnalysis

TODO: Use for error

We should include the 411 audit data in the timeline analysis to show that token validation failed