add REST documentation for principals module

Makes sense