some validation to not make pins unless admins