add REST documentation for principals module

The signature doesn't determine the access control to the group. /cc @simong : What would be the best way of describing the signature?