fix Account.get_permissions() to return Account._permissions
add tests for resources.Account