I'm uneasy about this because it introduces new state management. Once a PIN is locked, is webpay *guaranteed* to call ``unset_was_locked`` in this view?