1) Respect return url specified in $_GET['destination']; 2) Make Web Services tab in My Account visible to regular users