added check of xsrfToken for endpoint operations
fixed typos
added backend validation for account name
added backend validation for update of psw