not adding roaming obj to req.soajs.tenant unless needed, force reload user record if roaming or in case of clientId mismatch with req.soajs.tenant.id to guarantee allowedTenant configuration
not adding roaming obj to req.soajs.tenant unless needed, force reload user record if roaming or in case of clientId mismatch with req.soajs.tenant.id to guarantee allowedTenant configuration

soajs/soajs.controller