Why a PUT to /accounts ?  That means that the API user can PUT an array of accounts to the server, effectively overriding all current accounts.
This is probably not what you meant to do....