changes to password forms
cleaned up pin controller