Better error when setPrincipal() has bad arguments
renewSession() returns user, not principal