fixed user and pin routes