add REST documentation for principals module

This will probably be `BasicUser`