add REST documentation for following module

I'll rename it to `BasicUser` and move it to the principals module.