aaa: map auth record just before fetch principal

this is required so we always map the auth record regardless of how it
was constructed.

Topic: AAA
Change-Id: I73851ccb7594107baa98d32917f2b47318c7bb32
Signed-off-by: Alon Bar-Lev <alonbl@redhat.com>