Issue 216 pin flow

I think we're almost ready to sign off, so let's get the code review started.

Caveats:
* UX and Security are still deciding on 6 digit pin versus 7 digit
* I'll rebase before merging