Remove old association classes
Explicitly permit get and create on collection
Move email verfication to accounts on client