add REST documentation for principals module

Can we make these a bit simpler. `getGroupMembers` would for example be a lot more readable