Moved accountService to base controller since all controllers need it to verify permissions; added StoryController.