adapted account api to multi user, fixed http referer bug