Added double quotes around `securitytoken` in /account end-point - valid JSON now.