add REST documentation for principals module

We shouldn't have a `Profile` object that contains both User and Group variables. It should be an enumeration of the (Basic)User and (Basic)Group models