update rights in account me route