added the . character in the regular expression for the username as a possible part of the URL of .../pins/user/<username>/ and newly registered users get also the permission to change pins, not tested