added security_principal to session and show email in the nav