REVIEW: [NXCM-4543] Prefer subject principal over request or authentication-token for userId

https://issues.sonatype.org/browse/NXCM-4543