Tests: can modify account name, city, address.
Test: restricted params should NOT be modified on post request.