add REST documentation for principals module

This should be an enumeration of `User|Group` or `BasicUser|BasicGroup`