Treat authorisation token PIN as string