Ignore accountSecret when trying to unlock

Otherwise we unlock the account with an invalid resource
"accountSecret". It would of course be better if we somhow made sure
that we unlocked all resources and otherwise request the login again.