Better error when setPrincipal() has bad arguments
renewSession() returns user, not principal
Merge branch 'master' of https://github.com/e14n/pump.io