/accounts/me should - return 200 with user data if authenticated and allowed - return 401 if not logged in - return 403 if not allowed
/accounts/me should