closes #1400, bunch of other fixes to 404, 403 in accounts
replace self links client side
closes #1458