Add :user_id to attr_accessible in pin.rb