remove framework.principal.  easy to support framework rate limiting later if someone asks
comment on a todo that will probably live here for a long time...