Improve principal checks for SockJS session

[rstoyanchev]

In TransportHandlingSockJsSession, when the original principal is null, we don't perform any further checks, but could at least verify the original remote address matches that of the current request.