add REST documentation for principals module

`isManager`, `isManager`, etc. are not a part of the `BasicUser`