AccountHeader: restrict privileged actions, fixes #713 Closes #713 See merge request soapbox-pub/soapbox-fe!950