Don't store principal in httpSession in facebookProcessor