Might as well be a little more efficient and lock this down by defining as:
<code>
protected static class HttpHeaderPrincipal implements Principal {
</code>