some refactoring on rest authorizer
rest get /resources/accounts does not require users as parameter anymore
if body is StringIO convert it String first
now to_hash_brief of ocomponent will show accounts on leases too
some refactoring
user has now a method that returns all the accounts that the user has