Session header authorization, Account resource reading