add PUT endpoint for system principal on principals, fix issues in claiming device