changed the GET action variable 'user' to account

this is because we will use the word 'user' for other purposes, general purposes handling sessions