add REST documentation for principals module

Not for user import. Signed is really only used to "become" a user or allow a global admin to login on a tenant