add REST documentation for principals module

At a minimum, `displayName` is also required