LPS-48797 getUserId() works fine when @AccessControlled is added to the method, but I'm not sure if the same is true when it's called from a portlet or JSP. Making it safer by changing to getGuestOrUserId() to avoid PrincipalExceptions