AccountController.lookup: skip auth