uncommented example configuration in auth-repo.xml
Moved principals declaration so it's not initialized unnecessarily