added user validation to _pin.html.erb