security.xml updated - include /account check
logic for user to view 'my account' added