more permissions and clean up edit account validation