Updated the way Authorization info is linked to Authentication principals

Fixed user principal