Then again, a principal does not necessarily have to have a login account. through a request which is taken care of by special, request-specific login views..