refactor api/pins

* use `current_member`
* use 1.9 style Hash syntax
* remove magic-number of ErrorCode
* use Member#pins association to find destroy pins