using auth.scope instead of custom pre-ware, closes #5
relaxed root group requirement for `/account` resources
Merge pull request #6 from jedireza/hapi-scope

using hapi's `auth.scope` instead of pre-ware