fixed cors and accounts api