add REST documentation for principals module

Ah, that's the response for the logged in user (which doesn't show following info). Will update for non-logged in users.