add REST documentation for principals module

Depending on the outcome of the discussion at https://github.com/oaeproject/Hilary/pull/953/files#r15755396, this will either need to be a `BasicPrincipal` intermediary model that has both `BasicUser` and `BasicGroup` as its possible properties, or a `BasicPrincipal` model that has the intersection of the possible user and group properties.