now use sha256
PIN hashes are actually compared now
PIN prompt expire after one minute