payment account api. restrict routes further. curl examples