adjusted controller to allow account update