explictly unset pin_was_locked_out instead of implicitly (bug 887862)

relies on https://github.com/mozilla/webpay/pull/229