Added GET to /account and removed email from security context as obsolete