fix URLs of JSON endpoints in account.js