Store principal on thread on request start, so getting data only for logged on user will be possible, without sending an identifier in every call
added meta tags