closes #1400, bunch of other fixes to 404, 403 in accounts