Update error messages (bug 863493)

Add client-side validation for pin format.

Solitude was exposing some error messages under "new_pin" rather than "pin" this addresses that too.