add REST documentation for principals module

I think we'll have to create a `BasicPrincipal` model that's the union of the two