[NXCM-4543] Prefer subject principal over request or authentication-token principal for userId, these could be different for token-based authentication schemes
Use RequestUtils.extractUserId() helper
Merge pull request #161 from sonatype/NXCM-4543-use-subject-principal

REVIEW: [NXCM-4543] Prefer subject principal over request or authentication-token for userId