add permitted param
use Time.now as default created tim for account record
add validations for Account