Authenticate user scoped by account