block the /account/ area in robots.txt too