TOMEE-1479 HttpRequestImpl#getUserPrincipal should return SecurityService..getCallerPrincipal