Change FedoraUserSecurityContext constructor to take a Principal rather than ServletCredentials, update tests