add REST documentation for principals module

This doesn't seem to be used