allow assertions or emails for account operations

Not ready for merge. Still need to get resource:// audience working with personatestuser.org addresses.