add POST /account, including hashed password.