Removed authorization attribute from AccountController