add REST documentation for principals module

A lot of these are not valid update fields. I believe only `description`, `displayName` and  `joinable` are valid update fields, but you'll have to double check that. They are also all optional.