updated api/createAccount & test.js to set security info