[api2] add api for manipulating accounts (used by admin only)