I think we should add another constructor that takes the account store as a third argument. I even think we should remove the account store setter from this class and use the request object the way the user constructs it (same thing as what we have for username and password).