Use req.principal for sanitizing activities

We were passing the req.principalUser to the Activity class to set
context for sanitizing. Instead, we now pass req.principal, in case
there is no principalUser.