Move things to commons, better return codes
ID interceptor get tenant from request