Do not rely on HttpContext.Current in IHostPrincipalService.