Added security manager to handle validating auth tokens. Added unit tests for security manager. Added custom principal to store user id.