remove email from accounts
add role parameter to POST /accounts/