/api/create_account should return apisecret like /api/login.

An application, such as an android/iphone app, offers a login screen which (like the web equivalent) allows account creation, then after getting the json response from the /api/create_account call it needs to make an additional /api/login call (or some other non-api call I suppose) to get the apisecret.  This seems inconsistent and it would be better if the /api/create_account call just returned the apisecret (as well as the auth token that it returns at the moment).

Regards,
 Mark.