added user auth for pins