Fixed principals endpoint so it has access to org_id