add REST documentation for principals module

Seems like a vague description