Access principal in success view

This fixes #669 
Sure, I doubt that it will be used in views particularly; the abstractions here aren't view specific as you see. It's simply useful to be able to grab an authn object from a TGT, and the result can be mapped to whatever scope in the webflow's view.