account detail page should have a link to Accout/LinkAccount
reducing unintended HTTP endpoints of controllers
locking down more HTTP endpoints