move /pm related routes to the Account.pm module