add pins/users association and authorization