Minor Change: Don't re-wrap the HttpSession to log session usage

  * Also, replaced FenixUserPrincipal with UserSession