add "account/" prefix to token session keys