Now can get user principal from session