Also clear PIN flags when verification failed (partial fix for #9)
Fixed some more APDU_return issues (fixes #09)