Fix potential security hole

If no UNIQUE index on coin_addresses is set, a user can change everyone's coin address if he sets his address first to the address he wants to change as there was no check for account_id.

Updates are now done only for the correct account_id.