add REST documentation for principals module

Will need to fix this up throughout