add REST documentation for principals module

This is probably a `BasicUser` ?