add REST documentation for principals module

Should be `BasicUser` as well?