add REST documentation for principals module

I actually think it's a copy/paste error. need to check