Add account api with authentication. close #2 close #4