recognize forceApprovalPrompt option in Accounts.ui.config

this option was originally added via #1226
Assure that transform is not changing cached object.
Make it more clear that the clone is for transform
fix typo
Expose match failures in server logs
Also log sanitized error in server logs (which gets sent to client) on match errors